Compliance & Trust Center
Complete transparency about security, data protection, and compliance standards.
Legal Documents
All customer agreements and policies, available for download.
-
arrow_forward
Privacy Policy
DPDP Act compliance, data handling, rights
-
arrow_forward
Terms of Service
Usage rights, restrictions, liability limits
-
arrow_forward
Service Level Agreement
99.5% uptime, support times, SLA credits
-
arrow_forward
Data Processing Agreement
Data processor obligations, sub-processors
Security & Certifications
Industry standards we comply with or are working towards.
-
check_circle
DPDP Act, 2023
Digital Personal Data Protection — Compliant
-
check_circle
AWS Security
Enterprise-grade cloud security standards
-
schedule
ISO 27001
Roadmap: Target certification in 2027
-
schedule
SOC 2 Type II
Roadmap: For enterprise customers
Security Practices
Technical and organizational measures we implement.
-
shield
AES-256 Encryption at Rest
All data encrypted when stored
-
shield
TLS 1.2+ in Transit
All data encrypted during transmission
-
shield
Role-Based Access Control
Employees access only what they need
-
shield
24/7 Audit Logging
All data access and modifications logged
-
shield
Annual Penetration Testing
Independent security assessments
-
shield
Daily Automated Backups
Geographically redundant storage
Data Handling
How we protect and manage your data.
-
Data Residency
All data stored in India (AWS ap-south-1)
-
Retention Policy
90 days post-termination for export; 7 years for legal/tax
-
Data Subject Rights
Access, correction, erasure, portability — all supported
-
Breach Notification
Within 72 hours of discovery (DPDP Act requirement)
Support & Escalation
How we support you and respond to issues.
-
Support Hours
9 AM – 6 PM IST, Monday–Friday (Indian holidays excluded)
-
Response Times
General: 24 hours | Critical: 4 hours
-
Escalation Path
Support → Supervisor → Engineering
-
Status Page
status.grapeit.in — Real-time uptime & incidents
Frequently Asked Questions
Where is my data stored?
All employee and organizational data is stored in AWS ap-south-1 (India region). Data never leaves India without your explicit consent.
How can I export my data?
You can export your data anytime via the account dashboard in CSV or JSON format. See our Privacy Policy for details on data portability rights.
What happens if there's a security breach?
We notify you within 72 hours, provide incident details, and support your notifications to affected individuals. See our Privacy Policy, Section 9, for breach procedures.
Is Grapeit GDPR compliant?
Yes, for EU data subjects. If you have EU employees, we comply with GDPR and do not transfer their data outside the EU without appropriate safeguards.
What's your uptime guarantee?
99.5% monthly uptime. If we fall below that, you're eligible for SLA credits. See our SLA for details and credit calculation.
Who should I contact for compliance questions?
Email our Data Protection Officer: dpo@grapeit.in
Need Help With Compliance?
Our compliance team is ready to help you navigate DPDP Act requirements and security questions.