Compliance & Certifications
Honestly stated — we never claim a certification we don’t hold · Version 0.1 (DRAFT)
ISO/IEC 27001:2022
In progressISMS foundations under way; target window to be confirmed. No certificate issued yet — no badge shown.
SOC 2 (Security · Availability · Confidentiality)
In progressEvidence machine started; Type I → Type II planned. No report issued yet.
India DPDP Act 2023 + DPDP Rules 2025
OngoingConsent, data-principal rights, Grievance Officer, breach notification, and India data localisation.
CERT-In Directions 2022
Ongoing6-hour incident reporting and ≥180-day in-India log retention with NIC/NPL time sync.
Personal data of Indian users and our security logs are stored in India (AWS ap-south-1, Mumbai).
Card payments are handled by Razorpay, a PCI-DSS-compliant India-based payment gateway; AirOne does not store cardholder data (card numbers never reach our servers). (Statement pending payment-flow verification & counsel review.)
Grievance Officer
Gowtham R, COO
dpo@airavadwebsolutions.com · see the India DPDP Notice.