Trust Center.
Everything legal, security, and procurement teams need to evaluate DigAI in one unified library. Clean facts, zero dead links, and transparent posture.
Verified CI tenant isolation & server RBAC
Self-assessed against India DPDP & GDPR
Regular quarterly review schedule
Policies, Agreements & Security Specs
Security Overview & Architecture
Detailed explanation of tenant isolation in CI, RBAC guards, signed links, and zero payment card storage.
Official Subprocessors Register
Complete disclosure of all infrastructure, messaging, and payment vendors touching customer data.
Responsible AI & Micro-Brain Principles
Guardrails, persona instructions, human hand-off mechanisms, and our no-model-training commitment.
Privacy & Data Protection Plain Guide
Plain-English companion explaining controller vs processor duties, retention, and deletion controls.
Data Processing Addendum (DPA)
Standard contractual clauses governing customer data processing and cross-border obligations.
Official Privacy Policy
Formal legal policy governing data collected when browsing websites and opening accounts.
Acceptable Use Policy (AUP)
Policies governing unsolicited bulk messaging, anti-spam rules, and WhatsApp compliance.
Vendor Security Questionnaire (CAIQ / Custom)
Pre-filled technical responses for enterprise procurement, vendor assessment, and RFP teams.
Accessibility Statement & WCAG Audit
Compliance posture regarding web accessibility, color contrast, and screen-reader keyboard support.
Compliance Status Board
Transparent disclosure of our legal, audit, and industry regulations posture.
India DPDP Act (2023)
Indian businesses collecting phone numbers and personal data are designated Data Fiduciaries; DigAI operates as Data Processor. We provide consent logging, purpose-based contact fields, and contact deletion tools.
GDPR (EU & UK)
For clients serving European residents, we offer our standard Data Processing Addendum (DPA), purpose limitation, and single-click contact deletion. Primary hosting is in India {{CONFIRM}}.
SOC 2 Type II
We do not currently possess a third-party SOC 2 audit report. Security is enforced through automated CI isolation tests, backend permissions guards, and encrypted sessions.
ISO / IEC 27001
We do not hold an ISO 27001 accreditation. If your enterprise policy mandates a certified ISMS certificate, contact our security desk for our security questionnaire.
Contact our Security & Compliance Team
Have specific security assessment requirements, custom vendor review portals, or enterprise DPA inquiries? Our security engineers respond within 1 business day.
Subscribe to Policy & Subprocessor Updates
We notify registered subscribers whenever our Subprocessors Register, Privacy Policy, or security controls change.
Ready to evaluate DigAI for your enterprise?
Sign up for a 14-day trial or request our complete security questionnaire documentation.