Home › Enterprise Legal Pack
The Enterprise Legal Pack
Everything your legal, procurement and InfoSec reviewers need to onboard DigiSurvey — in one place, written in standard language, DPDPA 2023 aligned and modelled on EU SCC Module 2. Read online, download for your file, or request a signed hard copy on company letterhead.
What’s in the pack
Privacy Policy (DPDPA 2023)
Full policy under India’s DPDP Act 2023 — legal basis per data category, 7-year IRDAI retention, Data Principal rights with 30-day fulfilment, grievance process.
Data Processing Agreement
DPA template for your legal team’s review — EU SCC Module 2 style, Indian law, 24-hour breach notice, annual audit right, Clause 7 Zero-Commercial-Use with liquidated damages.
Security Statement
Honest live-vs-planned view of our Technical & Organisational Measures. Encryption, access control, incident response, with planned items dated.
Sub-processors
Living list of the 9 sub-processors with role, region, certifications and date added. New additions published 14 days in advance; enterprise customers may object.
Breach Notification SOP
Our 24-hour detection target, 24-hour insurer notification, 72-hour DPB & Data Principal notification, 30-day public post-mortem.
Data Retention Schedule
Exactly what we keep, for how long, under which law, and what triggers automated deletion. One row per category.
Surveyor Data Commitment
Board-signed charter to every surveyor on the platform: no sale, no unauthorised sharing, purpose-limited use. 8 clauses, Director-signed, Grievance-Officer-attested.
Insurer Data Commitment
Dedicated charter to every insurance-company customer: strict tenant isolation, no cross-insurer visibility, no competitive benchmarking, no AI-training on your data. 12 clauses, uncapped liability for wilful breach.
Audit Readiness & Cooperation
Standing commitment for every audit stakeholder — insurer, IRDAI, DPBI, CERT-In, GST, Income Tax, MCA, SOC 2 assessor, security researcher. Who may audit, what we provide, timelines, cost. Board-signed.
Service Level Agreement (SLA)
99.9% monthly uptime target with 10/25/50% service credits. Severity 1–4 support response SLAs (1h ack, 4h resolve for Sev 1). Maintenance windows, exclusions, measurement. Board-signed.
Acceptable Use Policy
What users may and may not do on the platform — short, enforceable. Scraping, impersonation, security attacks, non-insurance use, IRDAI fabrication rules. Warning → suspension → termination.
Responsible Disclosure
Security researcher safe-harbour. Scope, out-of-scope, 24h acknowledgement, 7/14/30/90-day fix SLAs by severity, planned Hall of Fame, CERT-In 6-hour parallel reporting.
Business Continuity & DR
4h/24h RTO, 24h RPO. GPG-encrypted Backblaze backups with Object-Lock. Dual-director key envelopes. Scenarios covered. Semi-annual tabletop + annual full-restore exercise.
Record of Processing Activities
Public summary RoPA under DPDPA 2023 s.10(2)(c). 11-row processing table · legal basis · data categories · recipients · retention · safeguards. International-transfer table.
The Zero-Commercial-Use Pledge
The headline promise, signed by both Directors: we will never sell, syndicate, aggregate-and-resell or train general AI on your survey data. Enforceable in Indian courts; uncapped liability for a wilful breach.
Company at a glance
Request a signed hard copy
If your legal or procurement team needs a hard-copy, letterhead, Director-signed set, we send it by courier (India) or by signed PDF (international). Separate requests for the DPA to be executed per-customer are the standard path.
How we handle your review
- NDA on file first. We will sign your standard mutual NDA before sharing SOC-report evidence, penetration-test summaries or policy limits.
- DPA red-lines welcome. The DPA on this site is a template; we expect edits from your legal team. We turn around a red-line within 7 business days.
- Dedicated contact. Mrs. Monika Sharma (Director & authorised signatory) and Mr. Vikas Saini (Director) are personally available to insurer legal teams through the review.
- Enterprise security questionnaires. We complete standard formats (SIG-Lite, CAIQ, custom spreadsheets) within 10 business days of receipt.