Enterprise Security & Compliance

Security You Can Trust

Built for enterprise requirements. DPDP Act aligned, working toward GDPR compliance, with SOC 2 certification in progress.

Current Status

Active Compliance

MannSetu maintains compliance with major data protection regulations.

DPDP Act 2023

Aligned — Full Compliance by May 2027

India Digital Personal Data Protection Act

Data localization - all data stored in India
Consent management framework
Data principal rights supported
Grievance redressal mechanism

GDPR

Working Toward Compliance

EU General Data Protection Regulation

Privacy by design architecture
Data minimization principles
Right to erasure supported
Data Processing Agreement available

HIPAA

Under Evaluation

US Health Insurance Portability and Accountability Act

AES-256 encryption at rest, TLS 1.3 in transit
Access controls and audit logging
BAA availability subject to architecture review
PHI handling procedures documented

Roadmap

Certification Roadmap

Our commitment to enterprise-grade security certifications.

SOC 2 Type I

Q2 2026

In Progress

Service Organization Control - Point in Time Assessment

Security controls implementation
Availability monitoring
Confidentiality measures
Third-party audit engagement

SOC 2 Type II

Q4 2026

Planned

Service Organization Control - Operating Effectiveness

6-month observation period
Continuous monitoring evidence
Annual audit commitment
Trust Services Criteria coverage

ISO 27001

Q1 2027

Planned

Information Security Management System

ISMS framework implementation
Risk assessment methodology
Security policy documentation
Certification body engagement

Security Architecture

Built for Enterprise Security

Our security-first architecture protects your organization's most sensitive data.

Strong Encryption

AES-256 encryption at rest, TLS 1.3 in transit. Privacy-first architecture for all data.

Data Localization

All data hosted in India (AWS Mumbai region). SOC 2 certified data centers (AWS infrastructure certification). No cross-border data transfer without consent.

Privacy by Design

Anonymous access option. HR sees only aggregate data. Individual chats never exposed.

Data Retention

Configurable retention policies. Right to deletion honored within 72 hours.

Need Detailed Security Documentation?

Request our security questionnaire responses, penetration test summaries, or schedule a call with our security team.

Certification timelines are estimates and subject to change based on audit availability and third-party schedules. Last updated: March 2026.