Security and privacy
How we protect data
In our own products and in the systems we build for others. In plain words; we describe how it works rather than show badges.
How we build
Checked on the server
Who may see or change a record is decided on the server, never only in the browser, and every rule has tests.
Tested by trying to break it
Before a release, we try to reach data across roles and across customers. It doesn't ship until every attempt fails.
No shortcuts on identity
We don't weaken sign-in, MFA or access policies to make something work, and secrets never go into code or documents.
Our products
Where product data lives
In India
Our products run on Microsoft's cloud in its India region.
Microsoft's infrastructure
The data centres, encryption at rest and in transit, and physical security are Microsoft's. Their certifications are listed in the Microsoft Trust Center; they are Microsoft's, not ours.
One customer, one wall
Every request for a record is checked against the organisation of the person asking, and roles see only what their work needs.
India's Digital Personal Data Protection Act
The DPDP Act 2023 and its Rules give people rights over their personal data and set duties for those who hold it. We build software to support those duties:
- Collect only what is needed, and say why.
- Record notices and consent, with the version and the date.
- A clear process to see, correct or erase personal data.
- A breach response plan, and records that help report on time.
This is how we work, not legal advice.
This website
This site is separate from our products and holds no customer data. It sets no cookies and runs no analytics or advertising. If you use the contact form, we keep only what you type, to reply to you.
Questions about security?
Write to us at hello@wmnexus.in.