Trust Centre

Trust Centre

Our security commitments

• We encrypt everything in transit and at rest — All customer data is encrypted using TLS 1.3 in transit and AES-256 at rest. We do not transmit customer data over unencrypted channels.
• We operate least-privilege access — Access to customer environments is granted on a need-to-know basis, reviewed quarterly, and revoked immediately upon engagement closure or staff departure.
• We are CERT-In empanelled — Our security practice is authorised to conduct mandatory information security audits for Indian regulated organisations.
• We undergo independent security assessments — Our own infrastructure and systems are assessed annually by an independent penetration testing team — we practise what we preach.
• We maintain a responsible disclosure programme — Security researchers who discover vulnerabilities in our systems can report them safely and receive a timely, professional response.
• We carry professional indemnity insurance — Our cybersecurity consulting and audit services are covered by professional indemnity insurance, details available upon request.

Frequently asked questions

How do I report a security concern about eNeoteric's systems?

Use our Responsible Disclosure page at encse.com/responsible-disclosure or email [email protected]. We acknowledge all reports within 24 hours and aim to resolve confirmed vulnerabilities within 30 days.

Does eNeoteric have an ISO 27001 certificate for its own operations?

We are in active pursuit of ISO 27001 certification for our own operations and are currently in the implementation phase. In the meantime, our security programme is aligned to ISO 27001 controls and we undergo annual independent security assessments. We will publish our certificate here upon issuance.

How does eNeoteric handle data from client engagements?

Data from client engagements is handled under strict confidentiality. We process only the minimum data necessary for each engagement, store it in isolated, access-controlled environments, and delete or return it per the terms of our engagement agreement. We never use client data for secondary purposes.

Can I request a copy of eNeoteric's security documentation for due diligence?

Yes. Enterprise customers and prospects can request our security questionnaire responses, NDA-protected security documentation, and evidence of key controls as part of vendor due diligence. Contact [email protected] with subject 'Vendor Due Diligence Request'.