Verifiable, not claimed.
Security reviewers should not have to take our word for anything. Here are the certificate numbers, how we protect data, and what we send on request.
Certificates
| Standard | Certificate | Valid to | Verify |
|---|---|---|---|
| ISO/IEC 27001:2022, information security | II-24051001 | IAF CertSearch ↗ | |
| ISO 9001:2015, quality management | IQ-24051002 | IAF CertSearch ↗ |
Registrar: Intercontinental Systemcert Pvt. Ltd. (formerly Indraprastha Systemcert Pvt. Ltd.).
How we protect data
- Encryption in transit.
- Tenant isolation.
- Role-based access.
- Approval gates for sensitive automated actions.
Where data lives
Shared cloud, dedicated environment or on-premise, chosen by the client. For European clients, shared and dedicated environments are hosted in the EU. Some support, administration, backup and AI processing may take place in the United States or with providers outside the EU; these transfers rely on the European Commission's standard contractual clauses or another mechanism recognized by law. EU-only processing can be agreed per project.
People set the rules
Your team defines what the system may do autonomously and which actions require approval.
Security built in
Our platforms are protected by AI web application firewall technology we built from 2019 and brought in house with the acquisition of AppliSafe in 2024. It detects injection, cross-site scripting and other web attacks before they reach the application.
Available on request
- Data processing agreement
- Completed security questionnaires
- Certificate PDFs