NDA first
Every engagement is covered by a non-disclosure agreement before we see anything sensitive.
Trust & Certifications
We hold ourselves to the standard we audit you against.
Security companies get tested by their visitors. Here's how we protect your data, run engagements and keep our own house in order.
Our promise
How we handle your data
Need-to-know access
Only the people working on your engagement can access your data, reports and evidence.
Encrypted storage
Reports, forensic images and evidence are stored encrypted and shared through secure channels.
Secure destruction
Engagement data is destroyed at the end of the retention period, with a certificate on request.
Written scope & authorisation
No testing starts without a signed scope and authorisation from someone entitled to give it.
Honest claims
We publish only what we can prove — no invented statistics, logos or certifications.
Regulated audits
Who signs what
Some regulator-mandated audits must be signed by empanelled or specifically qualified auditors. For every engagement, your proposal states clearly which parts TrustNet Secure signs and which are delivered with a partner.
We describe our work as helping you align with RBI, SEBI, CERT-In, IRDAI and other frameworks. We never claim approval by a regulator.
Regulatory references (SEBI, RBI, CERT-In) indicate the frameworks we help clients align with, not endorsement by any regulator.
This website
Practising what we advise
- HTTPS only with HSTS, a strict Content-Security-Policy and hardened security headers.
- Forms validated server-side, rate-limited and protected against bots; we collect only what we need and log consent.
- Analytics load only after you consent.
- News feed content is sanitised before display — headlines only, never raw HTML.
- A published security.txt and responsible disclosure policy.