Skip to main content

Secure Minds System

Trust Center

Trust Center

We advise organisations on ISO/IEC 27001, SOC 2, PCI DSS, HIPAA, GDPR and the DPDP Act, and we hold ourselves to the same standard. This page sets out the policies that govern how Secure Minds handles personal data, protects information, stays resilient and conducts business.

Privacy PolicyRequest policies under NDA
Public

Privacy & Data Protection

How we collect, use, share, retain and protect personal data under the DPDP Act, 2023 and DPDP Rules, 2025, with EU/UK GDPR information for international clients.

Grievance Officer: Bharti Chadha, Director · privacy@secureminds.pro

Summary · full policy under NDA

Information Security

A management-approved Information Security Policy built on confidentiality, integrity and availability:

  • Four-tier classification (Public, Internal, Confidential, Restricted); client data handled as Confidential or Restricted
  • Need-to-know access, MFA wherever supported, no shared accounts on client systems
  • Encryption at rest and in transit; approved platforms and encrypted devices only
  • Mandatory incident reporting and investigation
  • NDAs with third parties; client data returned or deleted per contract
  • Security awareness training at onboarding and annually
Summary · full policy under NDA

Acceptable Use

Every employee, contractor, consultant and intern is bound by our Acceptable Use Policy and signs an acknowledgment. It governs access and authentication, devices and networks, data handling, email and communication, internet and software use, physical security, and information sharing, for both Secure Minds and client-provided systems. Use is monitored and violations are enforced.

Summary · full policy under NDA

Business Continuity & Disaster Recovery

Secure Minds runs a cloud-first operating model with no on-premises infrastructure. Our BCP & DR Policy covers MFA on all cloud accounts, designated secure storage for business records, defined responsibilities for continuity and data restoration during service disruption, and periodic testing and awareness.

Public

Ethics & Anti-Corruption

Zero tolerance for bribery and corruption, directly or through third parties:

  • Facilitation payments prohibited
  • Gifts and hospitality above INR 5,000 reported and approved
  • Risk-based due diligence and anti-corruption clauses for third parties
  • Concerns reported to compliance@secureminds.pro, with no retaliation for good-faith reports

Download Anti-Corruption Policy (PDF)

Public

For Candidates

What to expect when Secure Minds puts you forward for a role, and how we treat your data.

Policy register

PolicyVersionApproved / effectiveAvailability
Privacy Policy1.011 Aug 2026Public
Candidate Privacy Notice1.019 Sep 2026Public
Anti-Corruption Policy2.011 Sep 2023Public (PDF)
Candidate Interview Guidelines——Public (PDF)
Acceptable Use Policy1.105 Nov 2025On request, under NDA
Information Security Policy1.024 Apr 2025On request, under NDA
Business Continuity & Disaster Recovery Policy1.003 Mar 2025On request, under NDA

Clients and prospects completing vendor due diligence can request our internal policies under NDA. Privacy requests and complaints go to privacy@secureminds.pro.