Data residency
Customer data will be hosted in India (AWS Mumbai or Hyderabad regions, planned). Data-scanning collectors can run inside your own environment so raw personal data stays there. Confirm at launch
Trust & Security
How we handle your data and our own security
We sell trust, so we hold ourselves to the same standards. This page states exactly what is true today and what is in progress.
How we use AI
We use AI to speed up research and drafting. Customer production data is never entered into public AI tools. Every finding and every compliance document is reviewed by a named person before it reaches you.
Certifications
ISO/IEC 27001: implementation in progress. We are not yet certified, and we will publish the certificate only once it is issued. We do not currently hold SOC 2 or CERT-In empanelment. Where a CERT-In-empanelled audit is required, we will work with empanelled partners.
Regulatory alignment
Our contracts support the audit and inspection rights that RBI-regulated entities need from their technology providers. We offer data-processing agreements (processor terms), and a sub-processor list is available on request.
Responsible OSINT
Free exposure reports use passive, public-source checks only. Active testing is done only under a written authorisation and an agreed scope.
Report a vulnerability
Found a security issue in our website or services? See our vulnerability disclosure policy.
Prahari is not affiliated with, and is not endorsed by, RBI, the Reserve Bank Innovation Hub, MeitY, CERT-In, NPCI or the Data Protection Board of India.