Navarambh Software Private Ltd recognises that the confidentiality, integrity and availability of information and data created, maintained and hosted by us are vital to the success of the business and privacy of our partners.

As a service provider/product, we understand the importance in providing clear information about our security practices, tools, resources and responsibilities within Navarambh Software Private Ltd so that our customers can feel confident in choosing us as a trusted provider.

This Security Posture highlights high-level details about our steps to identify and mitigate risks, implement best practices, and continuously develop ways to improve.

Founded in 2016

|
|

Controls (15)

Here are the controls implemented at Navarambh Software Private Ltd to ensure compliance, as a part of our security program.

Product security (3)

Secure Software Development Life Cycle

We enforce a deterministic SDLC encompassing strict change management, logical separation of development, test, and production environments, and mandatory peer-reviewed pull requests before deployment. Our ISO27001 SOA mandates these control these our Software Development Lifecycle Policy.

Continuous Vulnerability Management and Penetration Testing

Independent, third-party penetration testing is performed annually, alongside continuous dependency scanning, to detect and remediate vulnerabilities within strict Service Level Agreements (SLAs). Our ISO27001 SOA govens these testing protocols under The Vulnerability and Penetration Testing Policy.

Security Training and Awareness

All engineering and support personnel undergo mandatory annual information security and data privacy training.

Data security (3)

Cryptographic Controls and Data Encryption

Structured database records and file artifacts on our AWS infrastructure are encrypted at rest using AES-256 encryption, while data in transit is protected via TLS 1.2 or higher. Our ISO27001 SOA lists the Cryptographic Systems Policy and Encryption Key Management Policy as actively managed requirements for data protection.

Resilient Backups and Disaster Recovery

Automated daily database snapshots are taken, encrypted using AES-GCM 256-bit algorithms, and retained on a 10-day rolling lifecycle. Our ISO27001 SOA maps this infrastructure redundancy to our Business Continuity and Disaster Recovery Policy.

Information Deletion and Erasure

Customer production data is automatically, securely, and permanently purged following a standard 60-day post-termination retention window to eliminate unauthorized exposure risks.

Network security (2)

Cloud Infrastructure and Network Segregation

Hosted entirely on Amazon Web Services (AWS), our cloud perimeter is protected through network segregation, secure cloud service configuration, and strict firewall defenses. Our ISO27001 SOA lists these active controls under the Network and Security Policy.

System Activity Logging and Monitoring

Administrative access, privileged actions, and security-relevant events are logged and monitored. Our ISO27001 SOA relies on the Logging and Monitoring Policy Statement to govern continuous surveillance practices.

App security (2)

Identity Management and Access Restrictions

AIO Tests relies entirely on the Atlassian/Jira ecosystem for user authentication via JWT tokens, seamlessly inheriting your corporate Single Sign-On (SSO) and Multi-Factor Authentication (MFA) controls. Our ISO27001 SOA governs internal backend application rights via the Access Control Policy.

Secure Coding Practices

Development teams follow documented secure coding guidelines and execute rigorous security testing during development and acceptance phases. Our ISO27001 SOA verifies these active controls via the Secure Coding Policy.

Endpoint security (2)

Remote Working and Endpoint Device Management

Because our engineering and support personnel operate remotely, our endpoint protections and configuration baselines govern all corporate hardware. Our ISO27001 SOA enforces these standards through the Teleworking policy.

Protection Against Malware

Proactive, centrally managed antivirus defenses and malware protections are deployed across all user endpoint devices and processing facilities. Our ISO27001 SOA cites the Antivirus and Malicious Software Policy to enforce continuous scanning.

Corporate security (3)

ISO/IEC 27001:2022 ISMS Governance

Navarambh Software Private Limited operates under a formally certified Information Security Management System (ISMS) governed by the internal Information Security Group (ISG). Our ISO27001 SOA outlines comprehensive management responsibilities, duty segregation, and independent internal audits.

Security Incident Management

We maintain strict incident containment and notification protocols, formally committing to notifying affected stakeholders within a maximum of 24 hours of identifying a security event.

Employment Security and Confidentiality

All personnel sign strict confidentiality and non-disclosure agreements prior to employment. Our ISO27001 SOA mandates rigorous employee onboarding, off-boarding, and formal disciplinary procedures to mitigate insider risks.

Create your own Trust Center | Powered by

Sprinto Logo