Security Posture
Our commitment to protecting your enterprise data, infrastructure, and operations with industry-leading security practices.
1. Data Protection & Encryption
We protect your data at rest and in transit using strong cryptographic protocols. All communications with our web apps and servers are protected by HTTPS/TLS encryption.
2. Secure Architecture (Zero-Trust)
We incorporate secure software development lifecycle (SSDLC) principles from day one. All products we build for clients follow the **Zero-Trust** model:
- Least-privilege access controls mapped to roles
- Network segregation and micro-segmentation
- Continuous authentication and audit logs
- Multi-factor authentication (MFA) forced across all company infrastructure
3. Compliance and Standards
Our internal systems and development teams operate in compliance with major cybersecurity frameworks:
- ISO 27001 information security guidelines
- SOC 2 Type II readiness criteria for services
- HIPAA security and privacy compliance (for healthcare clients)
- GDPR/DPDP Act compliance regarding customer consent and data minimisation
4. Incident Response and Threat Monitoring
We maintain a 24/7 incident response capability. Our SRE and security teams continuously monitor for security anomalies, malware, and unauthorized access logs. We guarantee immediate customer notification within 24 hours of any verified security incident affecting customer data.
5. Vulnerability Disclosure
We welcome security researchers and customers to report vulnerabilities. If you discover a security issue on our website or software services, please contact us immediately at support@nxgentech.in. We will investigate and address all valid reports promptly.