Skip to content
Security & procurement

Everything your security review will ask for.

Most enterprise deals lose a quarter to procurement. The pack is published so your legal and InfoSec teams can start today rather than after the third call.

Controls

What is in force, and what is underway.

A filled dot is in force today. A hollow dot is honestly in progress — we would rather tell you now than at the security review.

Control Status What you get
ISO 27001
Certified
Information security management certified, with the certificate and scope statement on request
ISO 9001
Certified
Quality management certified — the delivery process is audited, not just the output
CMMI
Appraised
Process maturity appraised, so delivery governance is documented rather than improvised
QCI
Certified
Quality Council of India certification covering the delivery organisation
SOC 2 Type II
Audit underway
Independent audit in progress. Current controls, scope and expected date under NDA
GDPR & India DPDP
In place
DPA, sub-processor list, retention schedules and deletion workflows ready to sign
Data residency
Four regions
India, US, EU or UAE, chosen at contract time. Data does not leave the region you pick
SSO, SCIM and RBAC
Included
SAML and OIDC sign-on, automated provisioning, role permissions down to the field
AI governance
ISO 42001-aligned
Your data never trains a shared model, and every AI decision carries its evidence
Security & trust

What is in force today, and the work honestly in progress. Your reviewer can start from the pack rather than from a blank questionnaire.

Request the pack →Book a call
IP and data

Yours, in writing, before anything starts.

Your IP, your repos Contractual

Everything we build belongs to you. NDA before anything sensitive changes hands.

Your choice of model Flexible

Model-agnostic delivery. If you require a specific provider or a private deployment, that is the build.

Evidence per release Auditable

You get a score and an audit trail per release rather than a status update.

Transfer clause up front No lock-in

On a capability centre build, the transfer terms are agreed before month one.

Send it to your InfoSec team.

Ask and the full pack goes out the same day — certificates, DPA, sub-processor list, residency options and the AI governance statement.

Request the security pack →