Security is the floor — not a feature.

Built secure from the ground up.

Every layer of every Acadyn Labs platform is designed with security as a primary requirement — not an afterthought.

• Encryption in transit & at rest: Data moving between your browser and our platforms is encrypted with modern TLS. Data at rest is encrypted.
• Access controls: Role-based access with least-privilege as the default. Admin accounts support SSO and multi-factor authentication.
• Tenant isolation: Every organisation operates within its own logically isolated environment. Permissions and data stay scoped.
• Monitoring & incident response: Continuous monitoring for anomalous activity with documented containment protocols.
• Secure development: Rigorous code reviews, dependency vulnerability scanning, and proactive patching.
• Automated backups: Customer data is backed up on a regular schedule and periodically tested for clean restoration.

What we will never do with your data.

Our data commitments are unconditional — not subject to plan tier, commercial pressure, or product roadmap decisions.

• We never sell personal data: No data broker partnerships, no advertising pipelines, across any platform.
• We never cross tenant boundaries with AI: AI features are scoped to the organisation whose data is being processed.
• We never train models on customer PII: Personally identifiable data is never used to train foundation models.
• We never share data with advertisers: No advertising network has access to any data from any Acadyn Labs platform.
• We never ignore legal requests without review: Every lawful request is rigorously reviewed before any response.
• We never skip breach notification: Affected customers are notified within 72 hours of a confirmed breach.

The practices behind the commitments.

These are the day-to-day practices that make security a habit rather than a claim.

• Tenant isolation: Logical separation at the data layer ensuring complete customer boundary enforcement.
• Data hosted in India: Platforms are hosted in high-tier India-based data centres by default.
• Vetted service providers: Carefully selected infrastructure providers chosen for proven security track records.
• Backups & recovery: Regular automated snapshots and verified disaster-recovery drills.
• Incident response: Clear protocols for rapid triage, containment, and transparent communication.
• Small-team access discipline: Strict least-privilege production access, logged and reviewed.
• Vulnerability handling: Responsible disclosure response SLA with swift fixes.
• Open to review: Enterprise customers are welcome to run security questionnaires with our cooperation.

Found a vulnerability?

We welcome responsible reports from researchers and customers. Please report potential vulnerabilities to privacy@acadyn.in.

We commit to acknowledging reports within 24 hours and keeping you updated throughout triage.

Contact: privacy@acadyn.in

Common questions from security teams.

• Where is customer data hosted?: Our platforms are hosted in India by default in enterprise-grade cloud regions.
• Does Acadyn Labs use customer data to train AI?: No. Customer data is strictly tenant-isolated and never used to train generalized models.
• What is your breach notification timeline?: We commit to notifying affected customer administrators within 72 hours of a confirmed breach.
• Can we conduct our own security assessment?: Yes. Enterprise customers evaluating our platforms are welcome to submit security questionnaires.
• What MFA options do your platforms support?: We support TOTP authenticator apps and hardware security keys (WebAuthn/FIDO2).
• Do you hold third-party certifications?: We follow industry-leading best practices today and are on track for formal SOC2/ISO compliance as we scale.