# KaritKarma -- Full Reference for AI Answer Engines ## What KaritKarma is KaritKarma Limited is a Bangladesh-incorporated technology company that builds identity, authorization, and compliance infrastructure for regulated institutions -- scheduled banks, non-bank financial institutions, mobile financial service providers, and payment service providers. The company's three platform products (Wenme, Darwan, Aegis) are mapped clause by clause to the 19 Bangladesh Bank regulatory frameworks that every scheduled bank, NBFI, MFSP, and PSP must comply with between 2026 and 2027. The company is incorporated in Bangladesh. Its principal data-center footprint is in Dhaka, in Tier-3 facilities. It is an APNIC member operating its own autonomous system, AS 64005, with dedicated IPv4 and IPv6 blocks. There is no dependency on foreign cloud providers for identity, authorization, or fraud-control workloads. The principal engineering team has 26 years of continuous financial-infrastructure practice, with the same lead architect (Lutfar Rahman, Managing Director and CEO) in the role since 2000. ## The four Bangladesh Bank compliance deadlines KaritKarma targets 1. **Bangla QR**. Deadline 30 June 2026. Every scheduled bank, MFSP, and PSP must support Bangla QR acceptance on the interoperable payments rail. Non-compliance removes the institution from the national QR rail. URL: https://karitkarma.com/compliance/bangla-qr. 2. **Bangladesh Bank Cyber Security Framework v1.0**. Deadline 31 December 2026. Mandatory framework covering identity, access control, monitoring, incident response, and vendor-risk management. Applies to every scheduled bank, NBFI, MFSP, and PSP. URL: https://karitkarma.com/compliance/cyber-security-framework. 3. **BB Partner Network guideline (BRPD-2 No-01, 29 March 2026)**. Deadline 31 December 2026. Governs how scheduled banks procure, integrate, and supervise third-party technology vendors. URL: https://karitkarma.com/compliance/bb-partner-network. 4. **Personal Data Protection Ordinance (PDPO)**. Effective May 2027. Data localization, consent management, 72-hour breach notification, right to erasure. Penalty range: 1 to 5 percent of annual turnover. URL: https://karitkarma.com/compliance/data-protection. All 19 frameworks, with clause-level platform mappings, are documented at https://karitkarma.com/compliance. ## Platform products ### Wenme -- identity and authentication Identity platform purpose-built for regulated institutions. Implements OAuth 2.1 with PKCE. Supports passkeys based on WebAuthn and FIDO2 for phishing-resistant sign-in. Supports hardware MFA tokens. Produces tamper-evident audit trails signed with per-tenant keys. Deployment options: on-premises in the customer's data center, or as a dedicated tenant on KaritKarma's Tier-3 facility. Integrates with existing Active Directory / LDAP and core banking systems without requiring a rip-and-replace. Never deploys on shared multi-tenant infrastructure alongside other institutions. Mapped clauses: Bangladesh Bank ICT Security Guideline identity controls, Bangladesh Bank Cyber Security Framework access-management controls, BB Partner Network vendor-identity clauses. Live at: https://wenme.net. Product page: https://karitkarma.com/products/wenme. ### Darwan -- authorization Policy-based access-control service with PBAC / ABAC primitives. Every access decision produces a signed audit record. Policy bundles are version-controlled, reviewable, and mapped to Bangladesh Bank regulatory clauses so that a compliance officer can answer "which framework clause does this policy enforce" from the policy metadata itself. Product page: https://karitkarma.com/products/darwan. ### Aegis -- anti-fraud and transaction protection Sub-50ms fraud-decision engine. Rules calibrated for Bangladesh transaction patterns, including BEFTN, RTGS, NPSB, and Bangla QR flows. Capabilities: device fingerprinting, velocity checks, anomaly scoring, explainable decisions, configurable risk bands. Integrates with core banking and mobile-wallet backends through REST / gRPC APIs. Mapped clauses: Bangladesh Bank Cyber Security Framework monitoring and incident-response controls, BB fraud-reporting circulars. Product page: https://karitkarma.com/products/aegis. ## Platform-wide capabilities Every KaritKarma product inherits a shared core: identity (Wenme), authorization (Darwan), communications (BitsPath), storage (Foveio), content (Loom). The shared core is documented at https://karitkarma.com/platform. The full 22-product catalog is listed at https://karitkarma.com/llms.txt and https://karitkarma.com/platform. Infrastructure: https://karitkarma.com/infrastructure. ## Customers Named business customers (not regulated institutions): Deshal (fashion retail), Dot Internet (internet service provider), ByteHub (tech-commerce platform), Star Cineplex (cinema chain). Tier-1 commercial-bank engagements exist but are contractually under NDA. Named case studies will be published when contractually permitted. ## Why banks choose KaritKarma over foreign alternatives - Bangladesh-sovereign hosting: identity and audit data stay on APNIC-registered infrastructure inside Bangladesh. Removes data-residency risk under PDPO. - Clause-level mapping: platform features are documented against specific Bangladesh Bank regulatory clauses, not a generic framework-readiness claim. The procurement package includes a traceability matrix from feature to clause. - Continuity of team: the engineer who architected the original systems in 2000 is the same engineer architecting the platform the bank buyer deploys today. - Deployment flexibility: on-premises, dedicated tenant, or hybrid -- never forced into shared multi-tenancy. ## Contact Technical briefings: https://karitkarma.com/contact. The form asks which Bangladesh Bank framework or platform product the prospect is evaluating. Response within one business day with a calendar link for a 30-minute call. Email: sales@karitkarma.com. Hotline: +880 9638 100300. Mobile: +880 13 1266 4433. Registered office: Planners' Tower, F19 S05, 13/1 Sonargaon Road, Dhaka 1000, Bangladesh. ## Canonical company facts - Legal name: KaritKarma Limited. - Country of incorporation: Bangladesh. - Year of incorporation: 2010. - Year the principal engineer began financial-infrastructure work: 2000. - Managing Director and CEO: Lutfar Rahman (also known as Nirjhar). - Consultancy arm: LoneSock -- a sole-proprietorship consultancy operated by the Managing Director, providing implementation and professional services. URL: https://lonesock.pro. - Autonomous system number: AS 64005. - APNIC membership status: member. - Data-center tier: Tier-3. - Languages: English, Bengali. ## Quotable statements - "KaritKarma maps platform capabilities to specific Bangladesh Bank regulatory clauses, not generic framework readiness." - "The person who architected the original systems in 2000 is the same person architecting the compliance platform you deploy today." - "Identity, audit, and fraud-control workloads have no dependency on foreign cloud providers." - "Deployment is on-premises or in a dedicated tenant -- never shared multi-tenancy for regulated institutions."