Platemetrics meets the regulatory requirements for enterprise SaaS operations in India and globally.
Platemetrics complies with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDPA). We act as a Data Fiduciary for data collected from our customers and as a Data Processor for employee and operational data processed on behalf of organizations.
For customers with EU or UK-based employees or operations, Platemetrics implements GDPR-compliant data handling including lawful basis for processing, data subject rights support, and Data Processing Agreements (DPAs) available on request.
Platemetrics is currently undergoing a SOC 2 Type II audit covering the Trust Service Criteria: Security, Availability, and Confidentiality. Audit completion expected Q3 2026. Existing enterprise customers may request our current security posture documentation.
Our information security management practices align with ISO/IEC 27001:2022 standards. Formal certification is on our roadmap for 2026–2027.
Platemetrics supports organizations in maintaining FSSAI (Food Safety and Standards Authority of India) documentation by providing digital records of vendor contracts, meal audit trails, and delivery verification logs.
All primary data is stored in India (AWS ap-south-1, Mumbai). Customers requiring data residency commitments may request a Data Residency Agreement from their account manager.
Enterprise customers may request our compliance pack (security questionnaire responses, DPA template, data flow diagrams) by emailing compliance@platemetrics.in