NyayaHQ Trust & Security Center
NyayaHQ is aligned with the OWASP Top 10 and India's Digital Personal Data Protection Act 2023 (DPDP Act). All advocate and client data is stored in India.
Data Residency
All data is stored on AWS RDS PostgreSQL and Amazon S3 in the Mumbai region (ap-south-1), India. No data is transferred or stored outside India.
Encryption
Data at rest is encrypted with AES-256. Data in transit uses TLS 1.2+. Passwords are hashed with bcrypt (work factor 12).
Compliance
- Digital Personal Data Protection Act 2023 (DPDP Act)
- IT Rules 2025 — reasonable security practices
- OWASP Top 10 — self-assessed, updated quarterly
- AWS shared responsibility model
Reliability
Hosted on AWS App Runner (ap-south-1) with autoscaling (min 2, max 25 instances, 100 concurrent requests per instance). RDS automated backups with 35-day retention and deletion protection. Service worker caches critical data for offline access.