Security & compliance
Built on trust. Audited. Documented.
We treat security as a product, not a checkbox. Here's the full picture.
The DPDP shield
One principle: every byte of personal data has a paper trail.
Every consent, every send, every export, every deletion — logged, timestamped, attributable, and exportable.
Compliance
DPDP Act 2023 Live
Consent records, purpose limitation, data principal rights, breach notification — all built in.
ISO 27001 Planned 2026
Information security management certification targeted for 2026.
SOC 2 Type II Planned 2026
Independent audit of security, availability, and confidentiality controls targeted for 2026.
Infrastructure
- All data stored in AWS Mumbai (ap-south-1) by default
- TLS 1.3 in transit, AES-256 at rest
- DDoS protection via Cloudflare
- Daily encrypted backups, 35-day retention
- Quarterly third-party penetration tests
Report a vulnerability
If you've found a security issue, please email security@loopnow.in. We respond within 24 hours and run a responsible disclosure program.