Trust CenterSecurity & Compliance
Enterprise-grade security built by architects behind HIPAA-compliant healthcare data systems at Suki and Tala, with experience at Microsoft.
DPDPA 2023 Compliance
ActiveFull compliance with the Digital Personal Data Protection Act, 2023 (India). All personal data processing follows lawful purpose, data minimization, and storage limitation principles.
>Explicit consent management for all data subjects
>Right to erasure and data portability implemented
>Data Protection Officer designated per Section 8(9)
>Grievance redressal mechanism active within 72 hours
SOC-2 Type II
In-ProcessInfrastructure evaluated against the AICPA SOC-2 Type II standard across all five trust service criteria.
>Security: Logical and physical access controls
>Availability: System uptime and disaster recovery
>Processing Integrity: Complete and accurate data processing
>Confidentiality: AES-256 at rest, TLS 1.3 in transit
>Privacy: Personal information handling per AICPA criteria
Data Sovereignty
EnforcedAll Indian talent assets processed and stored exclusively within AWS Mumbai Region (ap-south-1). No cross-border transfer without explicit authorization.
>AWS Mumbai Region (ap-south-1) for India, US-East & EU-West available
>Operational presence across USA, Europe, and India
>Cross-border transfer requires explicit written consent
>Regional compliance mapping for US, EU, and APAC jurisdictions
EncryptionAES-256 at rest, TLS 1.3 in transit
Access ControlZero-trust architecture with RBAC
Audit LoggingImmutable, tamper-proof event chain
Record IntegritySHA-256 hashes of rights, licences and evidence anchored on Polygon
Key ManagementAWS KMS with automatic rotation
Vulnerability MgmtContinuous scanning and patching
Incident Response< 4hr response, < 24hr resolution SLA
Engineering Pedigree
Built by the architects behind HIPAA-compliant data systems for Suki (voice AI for healthcare) and Tala (financial data platforms), with experience at Microsoft. Deep expertise in regulated-data infrastructure processing sensitive health records, financial transactions, and biometric data at scale.