Back to Home
Corporate Governance & Trust Center

Legal & Compliance

Our central trust registry: corporate details, regulatory standards, security architectures, vulnerability disclosure protocols, and accessibility commitments.

Entity: Svarnix Technologies Private LimitedLast Updated: September 2026

01.Corporate Impressum & Legal Entity

This website and the Svarnix software platform are operated by Svarnix Technologies Private Limited, an incorporated company registered under the Companies Act in India.

Company Full NameSvarnix Technologies Private Limited
Trade Brand NamesSvarnix · Svarnix Digital Ops
Domain & Platformhttps://svarnix.com
Primary IndustrySoftware Architecture & Digital Engineering
Corporate Communications & Inquiries:Email: connect@svarnix.com

02.Regulatory & Compliance Frameworks

Svarnix designs and maintains digital architectures aligned with Indian corporate law and international digital engineering best practices:

India DPDP Act 2023 & IT Act 2000

Primary Framework

Operating as a transparent Data Fiduciary under the Digital Personal Data Protection Act, 2023 and Section 43A of the Information Technology Act, 2000, enforcing purpose limitation, reasonable security safeguards, and prompt grievance redressal.

Corporate & GST Invoicing Compliance

Standard

Incorporated under the Companies Act in India. All engineering engagements and milestone deliverables are billed with formal GST tax invoices (CGST/SGST or IGST) based on your registered state and GSTIN.

Global Data Protection Principles

International Aligned

For cross-border engagements, we implement standard contractual data processing safeguards, strict confidentiality protocols, and zero monetization of customer data, aligned with global security norms.

03.Security Standards & Infrastructure

Our systems are engineered on modern cloud primitives emphasizing zero-trust boundaries:

Cryptographic ControlsEnd-to-end TLS 1.3 protocol encryption for all data in flight and AES-256 block cipher encryption for all databases and object storage at rest.
Certified Hosting FacilitiesUnderlying databases and serverless edge functions are hosted across SOC 2 Type II and ISO/IEC 27001 certified AWS infrastructure via Supabase.
Access Minimization & RBACMulti-factor authentication (MFA) is strictly enforced for administrative personnel, complemented by Row-Level Security (RLS) policies.
Disaster Recovery & BackupsPoint-in-Time Recovery (PITR) and geo-redundant automated snapshots maintain high resilience against regional infrastructure disruptions.

04.Vulnerability Disclosure Policy (VDP)

Svarnix values the contribution of the independent security research community. If you believe you have discovered a security weakness in our systems, we appreciate your responsible disclosure.

Safe Harbor Commitment

If you conduct vulnerability research in good faith, in adherence to these guidelines, and without accessing unauthorized user data, Svarnix commits not to pursue legal action against you or request law enforcement investigation.

Research Rules of Engagement:

  • Do not exploit a vulnerability beyond what is strictly necessary to demonstrate proof-of-concept.
  • Do not destroy, modify, or download sensitive client data.
  • Do not conduct Denial-of-Service (DoS/DDoS) attacks, social engineering, or physical intrusion.
  • Give Svarnix reasonable time (minimum 60 days) to remediate the vulnerability before public disclosure.
Reporting Endpoint:Email complete vulnerability details, reproduction steps, and impact assessment to: connect@svarnix.com. We acknowledge receipt within 48 business hours.

05.Accessibility Statement (WCAG 2.1 AA)

Svarnix is committed to ensuring our digital experiences are accessible to everyone, including individuals with visual, auditory, cognitive, and motor impairments.

Design Standards: Our interface incorporates WCAG 2.1 Level AA conformance criteria, featuring robust color contrast ratios against dark backgrounds, clear typography hierarchy, and semantic HTML landmarks.

Keyboard Navigability: All interactive elements, links, forms, and assessment flows can be operated via standard keyboard navigation with distinct visual focus rings.

Feedback: Encountering an accessibility barrier? Email our team at connect@svarnix.com with the URL and nature of the issue.

07.Anti-Corruption & Ethical Conduct

Svarnix maintains zero tolerance for bribery, commercial extortion, fraud, or unfair trade practices. We conduct our business in compliance with the UK Bribery Act 2010, the US Foreign Corrupt Practices Act (FCPA), and the Indian Prevention of Corruption Act. All client engagements are executed under transparent, auditable contractual milestones.