SECURITY & COMPLIANCE

Security & Compliance Statement

Last Updated: August 2026  ยท  ADZIGN Private Limited

๐Ÿ”
AES-256 Encrypted
Data at Rest
๐ŸŒ
TLS 1.3
Data in Transit
๐Ÿ›๏ธ
CERT-In Aligned
Indian IT Act
๐Ÿ›ก๏ธ
Zero-Trust
Network Framework

Data Encryption Standards

All data stored within ADZIGN-built systems is encrypted at rest using AES-256 symmetric encryption. All data in transit between clients, servers, and third-party integrations is secured using TLS 1.3 with forward secrecy enabled. Database-level encryption is applied to all sensitive fields including personally identifiable information (PII), government procurement identifiers, and financial transaction records.

GDPR Compliance

For clients and users operating within the European Economic Area (EEA), ADZIGN adheres to the General Data Protection Regulation (GDPR). This includes lawful basis for data processing, data minimization principles, clear consent mechanisms, right to erasure (Right to be Forgotten), and data portability compliance. Data Processing Agreements (DPAs) are available for enterprise clients on request.

CERT-In Compliance (India)

ADZIGN aligns all its information security practices with the directives issued by the Indian Computer Emergency Response Team (CERT-In) under the Ministry of Electronics and IT. This includes mandatory 6-hour incident reporting timelines, log retention for a minimum of 180 days, and implementation of approved cybersecurity frameworks for all GovTech platforms developed under our engineering mandate.

Zero-Trust Network Framework

ADZIGN implements a Zero-Trust architecture model across all cloud-deployed systems. Key principles include: never trust, always verify โ€” no implicit trust is granted to any user, device, or network segment. All access is governed by Role-Based Access Control (RBAC), multi-factor authentication (MFA), and least-privilege policies. Network micro-segmentation isolates critical workloads from general infrastructure.

Incident Response

ADZIGN maintains a documented Incident Response Plan (IRP) with defined detection, containment, eradication, and recovery phases. Enterprise and GovTech clients receive contractual SLA guarantees for incident acknowledgment (<4 hours), root cause analysis (<24 hours), and resolution timelines. All security incidents are reported to relevant authorities in compliance with CERT-In directives.

Report a Security Concern

If you discover a vulnerability or security concern in any ADZIGN system, please disclose it responsibly to: security@adzign.com. We commit to acknowledging all disclosures within 48 hours and to working transparently toward resolution.