02 · THE EVIDENCE
DATA RESIDENCY
Your tenant's region, stated in writing.
India region live. Residency options scoped per tenant — the region goes into the contract, not a FAQ.
ARCHITECTURE & ENCRYPTION
Isolated, encrypted, role-bound.
Tenant isolation, encryption in transit and at rest, agent integrity protection, strict RBAC on who inside can see what.
COMPLIANCE MAPPING
Mapped to the frameworks you answer to.
ISO 27001 · SOC 2 · GDPR · HIPAA · PCI DSS · DPDP · RBI/SEBI/CERT-In. Cyfriq helps you demonstrate controls — the programme stays yours.
SUB-PROCESSORS
List public. DPA on request.
A current sub-processor list, and a signed Data Processing Agreement for your procurement file.
REPORT A VULNERABILITY
security@cyfriq.com
Responsible disclosure policy, plus a live /.well-known/security.txt — for a security vendor, itself a trust signal.
DOCUMENT REQUESTS
The security pack.
Certificates, VAPT summary, DPA, and the security & architecture whitepaper — under NDA.
Need our security pack?
Certificates, VAPT summary, DPA and whitepaper — assembled for your vendor-risk review.