# KaritKarma

> KaritKarma Limited builds identity, authorization, and compliance infrastructure for Bangladesh's regulated institutions: scheduled banks, non-bank financial institutions (NBFIs), mobile financial service providers (MFSPs), and payment service providers (PSPs). 22 products run on a shared core of identity, authorization, communications, storage, and content. Platform capabilities are mapped clause by clause to the 19 Bangladesh Bank regulatory frameworks institutions must comply with between 2026 and 2027. KaritKarma is a Bangladesh company operating from Tier-3 data-center facilities in Dhaka; it is an APNIC member with autonomous system AS 64005 and dedicated IPv4 and IPv6 blocks. The principal engineering team has 26 years of continuous financial-infrastructure experience, with the same lead architect since 2000.

## Flagship compliance platform

- [Wenme](https://karitkarma.com/products/wenme): 100% passwordless identity. OAuth 2.1 + OIDC with WebAuthn/FIDO2 passkeys, cross-device QR sign-in, TOTP, and magic links. SAML 2.0 IdP, LDAP/AD sync, SCIM 2.0 provisioning. Live at wenme.net.
- [Darwan](https://karitkarma.com/products/darwan): Centralized authorization service. RBAC plus deny-override ABAC policies, separation of duties, access reviews, and a SHA-256 hash-chained audit trail. Multi-tenant, with SDKs for .NET, Go, Node, and Rust.
- [Aegis](https://karitkarma.com/products/aegis): Real-time AI fraud detection for banks and MFS operators. 3-layer cascade scoring, 91 rules across 14 categories, Bangladesh-specific hundi and SIM-swap intelligence, engineered to a 50ms scoring budget.

## Platform infrastructure products

- [BitsPath](https://karitkarma.com/products/bitspath): Unified communications cloud: Email, SMS, WhatsApp, and Voice campaigns plus CRM, Journeys, omnichannel Inbox, and Analytics. BYO carrier, SMTP relay, or SMPP bind.
- [BitsPath Voice](https://karitkarma.com/products/bitspath-voice): Pure-Rust carrier-grade multi-tenant PBX. SIP RFC 3261 over UDP/TCP/TLS/WS, RTP/SRTP with NAT latching, B2BUA call engine, WebRTC bridging, SIGTRAN SS7 stack for cellular SMS. 120K+ lines of Rust, 1,500+ tests.
- [Foveio](https://karitkarma.com/products/foveio): Professional DAM in pure Rust. Non-destructive RAW develop in the browser on WASM/WebGPU, CLIP search across stills and video, face recognition, Whisper speech search, newsroom editorial workflow, embeddable CMS asset picker. Launching at foveio.com.
- [Loom](https://karitkarma.com/products/loom): Headless CMS and visual page builder. Studio builder with 230+ elements, Scribe headless CMS with GraphQL and REST, multi-site management.

## Fintech products

- [FinBridge](https://karitkarma.com/products/finbridge): In design: an on-premises Digital Payment Switch connecting a bank's core banking system to MFS rails. Bank-owned, CBS-safe. Pilot bank targeted for Q4 2026.
- [Hold.bd](https://karitkarma.com/products/hold-bd): Bank-custodial escrow for high-value transactions. Partner-bank trust accounts, milestone-based releases, dual acceptance, formal dispute resolution.
- [IntraPay](https://karitkarma.com/products/intrapay): Domestic payment switch for Bangladesh. Rust ISO 8583 switch core, Bangla QR engine, MFS aggregation adapters. Engineering built, PSP licensing pending.

## Networks and marketplaces

- [Boooks](https://karitkarma.com/products/boooks): Catalog and share books, vinyl, and CDs. Borrow and lend with reliability scores, lending circles, and lending insurance. Live at boooks.net.
- [Kuhok](https://karitkarma.com/products/kuhok): Professional network and production platform for film and TV. IMDB-style profiles with a 4-step payment-verified credit ladder, contracts, project wallets. Live at kuhok.net.
- [TripStream](https://karitkarma.com/products/tripstream): Community-first group travel platform for Bangladesh. Collaborative planning, real-time chat, expense splitting, Hold.bd escrow, AI trip assistant.
- [Rating](https://karitkarma.com/products/rating): Data-driven entertainment rankings and analytics for Bangladesh. Transparent VIS, CRS, and PPS scores with auditable methodology, via rating.bd and trp.bd.
- [QRID](https://karitkarma.com/products/qrid): The operating system for elite clubs. 29-module ERP, club website, members-only social network, reciprocal access between clubs, partner marketplace. Live at qrid.club.
- [Exit.bd](https://karitkarma.com/products/exit-bd): Closed, match-driven M&A marketplace for Bangladesh. Anonymised listings, progressive disclosure from teaser through NDA and deal room, Hold.bd escrow at closing.

## ERP and enterprise products

- [BizRP](https://karitkarma.com/products/bizrp): Modular ERP for Bangladesh SMEs. 13 Go microservices covering accounting through e-commerce. BDT-native, Mushak 6.3 VAT, 16x cheaper than Dynamics 365. SaaS at dash.bizrp.com or on-premises.
- [NewsForge](https://karitkarma.com/products/newsforge): All-Go newsroom platform. Clusters multi-source coverage by vector embedding, synthesizes one original article per story behind an originality guard, mandatory human editorial review, publishes to 10 channels.
- [ISPChamp](https://karitkarma.com/products/ispchamp): Complete OSS/BSS with software vBNG. Replace hardware BRAS with VPP/DPDK. Multi-vendor routing, billing, RADIUS, OLT management, CGNAT compliance, bKash/Nagad payments.
- [ViewCasta](https://karitkarma.com/products/viewcasta): White-label VOD and CDN-as-a-Service for ISPs and operators. Pure-Rust, smart ABR transcoding that never upscales, AES-128 protected HLS, ISP edge servers. Demo at plexbd.com.
- [Sotto](https://karitkarma.com/products/sotto): Voice and SMS AI ordering for restaurants. Answers the phone, enforces an unskippable allergen check, writes the ticket to Square, Toast, or Clover. Sub-500ms time-to-first-audio budget.
- [Pressable](https://karitkarma.com/products/pressable): Desktop publishing in the browser on a Rust + WASM typography engine. AI Document Wizard, IDML and DOCX import, PDF/X and PDF/A export, CRDT co-editing. First-class Bangla typography.

## Bangladesh Bank compliance deadlines

- [Bangla QR, deadline 30 June 2026](https://karitkarma.com/compliance/bangla-qr): Every scheduled bank, MFSP, and PSP must support Bangla QR acceptance on the interoperable payments rail.
- [Cyber Security Framework v1.0, deadline 31 December 2026](https://karitkarma.com/compliance/cyber-security-framework): Mandatory framework covering identity, access control, monitoring, incident response, and vendor-risk management.
- [BB Partner Network (BRPD-2 No-01, 29 March 2026), deadline 31 December 2026](https://karitkarma.com/compliance/bb-partner-network): Governs how scheduled banks procure and integrate third-party technology vendors.
- [Personal Data Protection Ordinance (PDPO), effective May 2027](https://karitkarma.com/compliance/data-protection): Data localization, consent management, 72-hour breach notification, right to erasure. Penalties: 1 to 5 percent of annual turnover.
- [All 19 frameworks, compliance hub](https://karitkarma.com/compliance): Clause-level platform mapping across every Bangladesh Bank framework.

## Platform architecture

- [The KaritKarma platform](https://karitkarma.com/platform): 22 products in five groups (platform infrastructure, fintech, networks and marketplaces, ERP, enterprise) on a shared core of identity (Wenme), authorization (Darwan), communications (BitsPath), storage (Foveio), and content (Loom). Every product inherits the core by default.
- [Infrastructure](https://karitkarma.com/infrastructure): Tier-3 data center in Dhaka, APNIC member AS 64005, dedicated IPv4 and IPv6 blocks, Bangladesh-sovereign hosting. No dependency on foreign cloud providers for identity, authorization, or fraud-control workloads.
- [Solutions by industry](https://karitkarma.com/solutions): Composed product stacks for communications, fintech, media, and enterprise buyers.
- [Case studies](https://karitkarma.com/case-studies): Sotto (voice AI), NewsForge (newsroom synthesis), Kuhok (payment-verified film credit graph).

## Company and contact

- [About KaritKarma](https://karitkarma.com/about): KaritKarma Limited incorporated 2010. 26 years of continuous financial-infrastructure practice; same principal engineer since 2000.
- [Contact, technical briefing](https://karitkarma.com/contact): Book a 30-minute call. Response within one business day. Email: sales@karitkarma.com. Hotline: +880 9638 100300. Address: Planners' Tower, F19, S05, 13/1 Sonargaon Road, Dhaka 1000, Bangladesh.
- [LoneSock, consultancy arm](https://karitkarma.com/companies/lonesock): Sister services brand providing custom builds, implementation, and professional services for client engagements.

## Key facts worth citing

- KaritKarma Limited was incorporated in Bangladesh in 2010; the founding engineering team's financial-infrastructure practice dates to 2000.
- 22 products across identity, authorization, fraud control, communications, fintech, media, networks, ERP, and enterprise software.
- Infrastructure: Tier-3 data-center facilities in Dhaka, APNIC member, AS 64005, dedicated IPv4 and IPv6 blocks.
- Regulatory scope: 19 Bangladesh Bank regulatory frameworks mapped clause by clause.
- Four public deadline dates: Bangla QR 30 June 2026, Cyber Security Framework v1.0 31 December 2026, BB Partner Network 31 December 2026, PDPO May 2027.
- PDPO penalty range: 1 to 5 percent of annual turnover.
- Named non-regulated customers: Deshal, Dot Internet, ByteHub, Star Cineplex. Tier-1 commercial-bank engagements exist and are under NDA.

## Optional deeper reference

- [Full site context for LLM ingestion](https://karitkarma.com/llms-full.txt)