Navarambh Software Private Ltd's Trust Center Trust Center – FAQs

Founded in 2016

Navarambh Software Private Ltd recognises that the confidentiality, integrity and availability of information and data created, maintained and hosted by us are vital to the success of the business and privacy of our partners.

As a service provider/product, we understand the importance in providing clear information about our security practices, tools, resources and responsibilities within Navarambh Software Private Ltd so that our customers can feel confident in choosing us as a trusted provider.

This Security Posture highlights high-level details about our steps to identify and mitigate risks, implement best practices, and continuously develop ways to improve.

Founded in 2016

FAQ (40)

Here are some frequently asked questions about Navarambh Software Private Ltd’s security posture.

Who develops and operates AIO Tests?

What is AIO Tests?

Does NSPL maintain any information security certifications (such as ISO 27001 or SOC 2)?

Are information security policies documented, maintained, and reviewed regularly?

Do all employees receive regular information security and privacy awareness training?

Does NSPL maintain a formal cyber risk management and third-party vendor assessment program?

What compliance documentation and audit rights are available to evaluating customers?

Where is AIO Tests hosted and where is customer data stored?

What data is covered by EU Data Residency, and is any data processed outside the EU?

What physical security controls protect the facilities where AIO Tests operates?

How does AIO Tests comply with GDPR, CCPA, and global privacy regulations?

Does NSPL provide a Data Processing Agreement (DPA)?

Who are AIO Tests' authorized sub-processors and where do they process data?

How are customers notified of new or changed sub-processors?

What legal transfer mechanism safeguards remote support access from India or transfers outside the EEA?

How does user authentication work, and does AIO Tests support SSO (e.g., Okta) and MFA?

Can AIO Tests support or engineering staff in India access customer production data?

How is privileged administrative access to the production environment controlled and audited?

How is customer data encrypted in transit, at rest, and in backups?

How are encryption keys managed, and is Customer-Managed Encryption (BYOK) supported for storage?

What is your backup frequency, retention period, and storage architecture?

What are your Recovery Point Objective (RPO) and Recovery Time Objective (RTO), and how do they relate to real-time replication?

Are Business Continuity and Disaster Recovery (BCP/DR) plans documented and periodically tested?

Which third-party AI / LLM providers does AIO Tests use, and how are they configured?

Can AI features be completely disabled?

What customer data is sent to the LLM provider when AI features are used?

Is customer data, prompts, or generated output ever used to train AI models?

Where is AI data processed, and how can EU customers guarantee strict EU data residency for AI?

Are AI prompts or generated outputs retained by AIO Tests or the LLM providers?

What security controls are integrated into your Software Development Life Cycle (SDLC) and Change Management process?

How do you manage vulnerabilities, dependency scanning, and penetration testing?

What system and security events are logged, and how are logs monitored?

What is your security incident response process and breach notification timeline?

Has NSPL experienced any material security incidents or data breaches in the last 3 years?

How can customers export their data, and are there any exit fees or lock-in barriers?

What happens to customer data when a subscription terminates?

What are your uptime SLAs, support hours, and support response times?

Who owns the Intellectual Property (IP) for customer data vs. platform enhancements?

Can enterprise customers opt out of marketing or logo publicity clauses?

Create your own Trust Center | Powered by