Security
How your data is actually protected
Specific controls, described specifically. If we can't point at how something works, we won't claim it.
Encrypted in transit
All traffic runs over HTTPS with HTTP Strict Transport Security enforced, so connections to StartIndia cannot quietly downgrade.
Documents stay scoped to your order
Files you upload attach to a specific order rather than a shared pool, and document access is checked against that order.
Signed uploads and downloads
Document transfers use short-lived signed links with server-side confirmation of size and type — not open file endpoints.
Controlled infrastructure
Services run in managed environments with role-based administrative access; production changes go through authenticated, logged channels.
What we don't claim
- No system can promise perfect security. What we commit to is the controls above, and fixing anything that falls short of them.
- We don't ask for passwords, OTPs or bank credentials over email or chat. If someone does, it isn't us.
Full details of data handling live in our Privacy Policy.
Found a vulnerability?
We appreciate responsible disclosure. Reach out and our team will investigate promptly.
Report an issue