Installing Brawta — signed by the company that makes it

1. Check the signature — it's ours

Only install the file from this site (brawta.app) or handed to you directly by us. Before you open it, Windows itself can tell you who signed it:

1. Right-click the file and choose "Properties"

   The file is Brawta-Setup.exe, usually in your Downloads folder.

2. Open the "Digital Signatures" tab

   The name of the signer should read RKhan Investment Limited.

3. Select it, then click "Details"

   Windows should say “This digital signature is OK.”

2. Windows may still show its blue box for a while

Windows decides whether to warn partly on reputation: how many people have already downloaded and run software from a given publisher. The signature makes us known by name. Reputation comes from downloads, and ours is new. Windows now builds that trust gradually for every new publisher, whatever certificate they hold, so for a while you may still see “Windows protected your PC.” What changes is what the box tells you:

1. Click "More info"

   It's the small link in the box.

2. Check the publisher reads RKhan Investment Limited

   If it says “Unknown publisher”, stop. That file was not signed by us.

3. Click "Run anyway", then follow the installer

   Choose where to install and finish, the same as any Windows app. If Windows asks permission to make changes, that box should also name RKhan Investment Limited as the verified publisher.

As more people install Brawta, the box appears less often, and then stops.

3. Want a second check? The fingerprint

The signature proves who made the file. The fingerprint proves it's the exact file we published for this version, which is worth checking if it reached you on a USB stick or by email. Open PowerShell in the folder where you saved it and run:

It prints a long code. It should match this, our published fingerprint for v1.0.0 (capital or lowercase letters don't matter):

4. That's it — and your data stays yours

Brawta runs offline for everything you do on your own — calculations, payslips, official forms, backups and the audit trail need no connection at all. Your companies, employees, pay runs and payslips live on your own computer, not in anyone's cloud, and backups are yours to keep, encrypted, wherever you choose. Two-person review and cloud backup need a connection, because they pass work between machines — and every paid plan includes at least two users, so if a second person approves your pay runs, that part is online.

Already using Brawta?

Nothing changes for you. Updates keep arriving through Brawta itself, the same way they always have.

How we got here

Before we had the certificate, this page showed the Windows warning instead of hiding it, and tracked the certificate step by step. A code-signing certificate is organisation-validated: the issuer checks the company against its registry filings before it issues anything. Both steps are done:

We'd still rather earn your trust than rent it. The signature tells you who made the file, the fingerprint tells you it's the exact one, and you can check both yourself. That's the same way we built the app: your data, your machine, your call.