How IDBANKQR.COM Works
A visual look at the site's layout and how your data actually moves through it.
Site Architecture
Four layers, each with one job. Your documents only ever exist in the two secure layers in the middle — never directly reachable from outside them.
You — Browser or Phone
Any device's browser. No app store install needed; works the same on a phone, tablet, or computer.
IDBANKQR.COM Web Application
ASP.NET Core MVC — every request is checked here to confirm you're logged in and that you own whatever document you're asking for, before anything is returned. Logging in is your password, and with the optional Extended Authentication Security setting turned on, a second step too: a 5-digit one-time code emailed to your registered address, before a session is ever created. That setting also requires your email to be verified with a one-time code at registration and again any time you change it later; with it off, those checks are optional. This layer also keeps two simple tallies: the public Visitors count shown at the bottom of the Home page (each browser counted once a day, search-engine crawlers left out, only the total stored), and a short-lived list of which members are logged in and active in the last few minutes, visible only to our team and never to other members. That list is held in memory, not saved as a history, and you drop off it as soon as you log out.
Secure Storage
Your account details live in the database; your actual document files live in separate storage outside any publicly reachable web path, with their contents encrypted at rest. Neither is accessible directly — only through the application layer above, after an ownership check.
Trusted Partners (as needed)
Razorpay for payment verification, SMS/WhatsApp/email for login codes and alerts, and a free IP-lookup service for the approximate location shown in those alert emails. The application layer talks to these on your behalf — they never have direct access to your stored documents. If you choose a Preferred Language other than English, Google Translate translates the pages in your browser: it receives the on-screen text of the page, but not your document numbers, file names or the files themselves.
Your Data's Journey
What actually happens, step by step, from the moment you register to the moment you share a document with someone else.
Register & Pay
Choose a plan and your Preferred Language, pay via Razorpay, verified automatically.
Upload or Capture
File or camera photo — validated, compressed if needed.
Stored Securely
Outside any public path, encrypted at rest, tied only to your account.
Access Anytime
Dashboard, smart search, or your document list — in your Preferred Language after every login.
Share Safely
Time-limited, watermarked QR — your choice of access.
Fully Logged
Every action recorded in your own Activity Log.
This is a simplified, visual overview meant to build confidence in how the system is put together — not a complete technical specification. For the specific security measures behind each step, see our FAQ.