India data residency
Documents and derived embeddings stay in Indian regions, with enterprise plans able to pin a named region.
Trust centre
Privileged data deserves more than a promise.
Advocates, CAs and HR leaders carry the confidentiality obligation personally. Here is exactly how VedaCore protects what you cannot afford to lose.
Per-firm data isolation
A logically isolated tenant with row-level access rules, no shared indexes, no cross-contamination.
Two-factor and role-based access
Partner, associate and staff roles, matter-level access lists, SSO on request.
Full audit trail
Every read, draft, edit, approval and export logged with user, timestamp and source document.
No training on your data
Your documents never train foundation models, prompts and outputs are never retained by model vendors.
Retention you control
Set retention windows per workspace, purge a matter on demand, get verifiable deletion confirmation.
Certification status
Where we honestly stand today.
VedaCore does not hold a completed SOC 2 or ISO 27001 certificate yet, and we will not display a badge we have not earned. This is the current state of each programme, maintained by the VedaCore team.
ISO/IEC 27001
In progressExternal audit targeted for 2026.
SOC 2 Type II
On roadmapControls mapped and monitored internally.
GDPR / DPDP readiness
ReadyDPA, sub-processor list and data subject request process already available.
Controls
The checklist your IT reviewer will ask for.
Encryption in transit
TLS 1.2+ on every connection
Encryption at rest
AES-256 on storage and backups
Access reviews
Quarterly, least-privilege by default
Backups
Point-in-time recovery, encrypted
Secrets
Managed vault, no keys in application code
Sub-processors
Disclosed list, DPA available on request
Confidentiality is a professional duty, not a feature flag.
Client privilege, POSH case files and tax records sit in the same workspace as your daily work. So access is scoped per matter, exports are logged, and every AI output keeps a named human reviewer on record.
Available on request
- Data processing agreement (DPA)
- Sub-processor list and data flow diagram
- Security questionnaire responses
- Deletion and retention policy
See VedaCore run your workflow
A 30-minute walkthrough on your own documents. No setup, no obligation — book a slot and bring the file that has been sitting on your desk too long.