For security, legal and procurement reviewers
Trust, security and delivery
This page is written for the security, legal and procurement reviewers who join a project after the business case is agreed. It summarises how we protect plant systems and data, our compliance status stated plainly, who owns the code, and how delivery works across India, the US and the Middle East. Ask us for detail on anything here.
Understand
Compliance status
GDPR and FDA 21 CFR Part 11 practices in place. ISO 27001 and SOC 2 Type II in progress. We will tell you exactly where each stands when you ask, and we do not claim certifications we do not hold.
Protecting plant systems
- Read only connections to controllers by default; any write to a PLC needs your controls team, a test and sign off.
- OT and IT networks segmented, with defined connections through a controlled boundary, following the ISA/IEC 62443 zone approach.
- Edge devices buffer data so a network problem never stops a machine.
- Changes made during planned stops, with a rollback plan.
How it works
Data handling and residency
- Systems deployed on premise, in your cloud account or hybrid, as your policy requires.
- Role based access, with access removed at the end of an engagement.
- For AI features, providers are configured so your data is not used for training, or models run in your infrastructure.
- Website enquiries are handled under our Privacy Policy.
Ownership and contracts
- Source code and IP are transferred to you at the end of the engagement, documented, in your repository.
- NDA first; mutual NDAs available.
- Contracts with Kadle Global Pvt Ltd, India.
Delivery across regions
- Engineering teams in Belagavi and Bengaluru, India, working in IST and on US Eastern business hours.
- For key US programmes there are US-based points of contact; ITAR or CMMC flagged work is routed through a US-based partner sub-contractor.
- A named engineer on weekly reviews, with written scope and change control.
Frequently asked questions
Can you complete our security questionnaire?
Yes. Send it with the NDA and we return it with supporting detail.
Do you hold ISO 27001 or SOC 2 today?
GDPR and FDA 21 CFR Part 11 practices in place. ISO 27001 and SOC 2 Type II in progress.
Who owns what you build?
You do. Source code and IP transfer to you at the end of the engagement.
Related reading
References
Start with one line and one number
We scope one line, agree the number that should move, and show it moving before anything is scaled. You keep the code and the data.
Step 1
An engineer reads it
Not a sales bot. Our team replies within 24 hours with questions or times for a call.
Step 2
30 minute call
Your process, machines, systems and the number you want to move. We tell you honestly if we are a fit.
Step 3
A written scope for one line
What we would connect, what you would see, how long it takes. You decide; nothing starts without your approval.
Reviewed by Amey Kadle, Founder, Ajinkya Technologies. Last reviewed: .