Data residency & DPDP
Personal data is handled in line with India's DPDP Act, with consent captured and purpose stated. Marketing-site enquiry data is processed on Cloudflare's global infrastructure; the product platform is India-resident.
Trust center
Security posture, stated plainly.
SafeCommand handles operational safety data for institutions, so our security posture is designed for that bar. We publish what is true today and mark what is in progress — never a claim we can't back.
Encryption
Data is encrypted in transit (TLS) and at rest across the platform.
Access control
Role-based access, least-privilege defaults, and full audit logging of privileged actions.
Certifications
SOC 2 and ISO 27001 are in progress. We will publish them here when held — and not before.
Responsible disclosure
Found something? Email security@safecmd.in and we'll respond promptly.