Security and Compliance
Your data and systems, handled with care
Enterprises, institutions and government teams trust us with sensitive data. This is how we protect it, from the first workshop to long term support.
How we protect your work
- Data hosted in India
Your platform and data can be hosted in India, inside cloud accounts you approve, and you keep full access to it.
- Access control
Role based access with least privilege. Admin and production access is limited to named people and reviewed.
- Encryption
Data is encrypted in transit and at rest. Secrets and keys live in managed secret stores, never in code.
- Secure development
Code review on every change and security reviews against the OWASP Top 10 before launch.
- Privacy by design
We build for the Digital Personal Data Protection Act, 2023: clear consent, purpose limits, retention rules and deletion on request.
- Reliability
Monitoring, alerts, backups and a tested recovery plan for the systems we run for you.
- Responsible AI
AI agents act only within the rules you set, sensitive actions need human approval, and every action is logged.
- Clear contracts
NDA before discovery, data processing terms in the contract, and full transfer of code and IP on completion.
Security is part of every phase
Security is planned from discovery, checked before every release and reviewed while the system runs, not added at the end.
- 01Security and data requirements captured during discovery
- 02Access, hosting region and retention agreed before build
- 03Security review and fixes before every major release
- 04Audit logs and access reviews during operation
- 05Documented handover of code, data and credentials
Going through a vendor review?
We complete security questionnaires, share our company registration documents and sign your NDA and data processing terms as part of onboarding.
- Security questionnaires
- Company and tax registration documents
- NDA and data processing terms
- Architecture and data flow notes
Tell us what your procurement or security team needs and we will send it.
Request documentsPlanning a platform or AI rollout?
Let's scope it together.
Tell us the problem, the users and the systems involved. We come back within 24 hours with next steps and a pilot proposal.