Compliance

These are the frameworks we line up with, and the ones that are out of scope for us. Each entry names the law, the audit scope, and where we stand today. If you need something else, email us at compliance@webhost24.in.

• DPDPA 2023

  Compliant

  The Digital Personal Data Protection Act 2023 (DPDPA). Your data stays in India. We answer data requests within 30 days.

• GDPR

  Compliant

  The General Data Protection Regulation (GDPR) for our customers outside India. You can get the Standard Contractual Clauses addendum.

• ISO 27001

  Roadmap 2027

  Our controls line up with the standard. Full certification is on our 2027 plan. Until then, you get a letter of conformance each year.

• PCI-DSS

  Out of scope

  We do not store, process, or send cardholder data. Razorpay takes the payment. See the Integrations page for the design.

• HIPAA / Healthcare

  Out of scope

  We host all kinds of sites. If you handle protected health information (PHI), you must sign a Business Associate Agreement (BAA) and pick a dedicated plan. We do not market the Health Insurance Portability and Accountability Act (HIPAA) as in scope.

• MeitY / India CERT-In

  Compliant

  Indian cyber rules. We work with CERT-In on incident reports, as hosting providers in India must.

If you need a certificate for one framework, ask us for the audit pack at compliance@webhost24.in.