Compliance & Data Protection

We handle our clients' systems and data with the same care we would want for our own.

Regulatory alignment

• Digital Personal Data Protection Act, 2023 (India)
• Information Technology Act, 2000 and CERT-In guidelines, including incident-reporting requirements
• GST-compliant invoicing for all hardware and services

Security practices

• Least-privilege access and unique credentials for every engineer
• Client passwords stored in an encrypted vault, never in plain text or chat
• Remote sessions only with client consent, logged and time-limited
• Secure-coding standards aligned with the OWASP Top 10 for all software projects
• Certified data wiping or destruction for retired storage devices

CCTV & biometric data

We advise clients on signage, retention periods and access restrictions for surveillance footage and biometric data, and configure systems so only authorised staff can view or export recordings.

Confidentiality

All staff sign confidentiality agreements. We are happy to sign client NDAs and data-processing agreements.

Reporting a concern

To report a security or privacy concern, email our support address with the subject "Security". We acknowledge reports within one business day.