Investor Presentaiton
Data security and privacy
Data Security
•
Periodic security testing of applications,
•
Hosting of the database in Militarized Zone in State Data Centre which is ISO 270001 certified
Activities monitored under Security Operations Centre and Database Activity Monitoring tool
•
Adoption of Industry best practices such as HSM, Key Secure Vault for encryption.
•
APIs enabled with payload encryption and hashed checks
Data Privacy
•
●
•
7 principles of Privacy by Design adopted.
principles of purpose specification, data minimization, collection limitation and retention policy
Design and architecture aligned to the rights of Data Principal as envisaged in the Personal Data
Protection Bill and IT Act 2000.
Data anonymization as a concept implemented.
21/03/22
35View entire presentation