What we hold, stated plainly.
We publish status rather than implying more than we have. Where something is in progress, it says in progress.
| Standard | Status | Scope |
|---|---|---|
| DPDP Act (India) | In progress | Personal data processed in India |
| HIPAA-ready engagements | Ready | US patient data handling |
| ISO/IEC 27001 | In progress | Information security management |
| SOC 2 Type II | In progress | Controls audited over 12 months |
Note
Readiness is not certification.
We prepare clients for certification and work alongside their auditor or certification body. We do not issue certificates ourselves — no credible firm does both. Where we describe an engagement as “HIPAA-ready” or “DPDPA-aligned”, that means the controls are implemented and evidenced, not that a certificate exists.
Next step
Need evidence for your audit?
We can share control mappings and sample deliverables under NDA.