Assessed controls implemented
OWASP Top 10
Application security review
Access control, cryptography, injection resistance, secure configuration, authentication, integrity, logging and SSRF controls were reviewed and remediated.
Trust & compliance
Security controls you can verify.
VidhiSangh completed a code, configuration and production-host review against 65 security and privacy findings on 27 September 2026.
65/65assessed findings
remediated
remediated
All assessed application controls are implemented.
Reviewed 27/09/2026Evidence is maintained in the repository controls matrix and backed by automated tests, audit trails and production configuration checks.
Controls implemented
DPDP Act 2023
Technical privacy controls
Versioned notice and consent, data rights, grievance workflow, retention, erasure, encryption and privacy-event records are built into the product.
Control-aligned
ISMS · ISO/IEC 27001
Information security management
Application and infrastructure controls map to Annex A. Formal certification and the organisation-level policy programme remain separate governance work.
Control-aligned
PIMS · ISO/IEC 27701
Privacy information management
Privacy controls map to controller and processor responsibilities. Certification, counsel review and operating evidence require an independent programme.
Controls in operation
Protection across the full application
These controls apply across identity, matters, documents, research, billing, client portals and integrations.
- Tenant isolation with forced PostgreSQL row-level security
- Encrypted identity data and blind-index search
- HttpOnly refresh sessions, MFA, passkeys and lockout
- Append-only, hash-chained security audit records
- Consent, access, correction, erasure and grievance workflows
- Upload validation, mandatory malware scanning and signed webhooks
- Secure headers, CSP, rate limits and secret validation
- Automated retention, encrypted backups and restore tooling