Privacy Policy

Effective Date: 2 October 2026 · Global Operations

This Privacy Policy explains how IndiquerGRC and the relevant operating entities (including Indiquer Global Service Private Limited and Indiquer RCM LLC) collect, process, store, and protect personal information when you visit our website, request product demonstrations, communicate with our advisory teams, or interact with our GRC platform.

1. Who We Are & Global Operating Entities

Indiquer operates across multiple international jurisdictions to provide continuous governance, risk, and cybersecurity compliance solutions:

Indiquer Global Service Private Limited (Global HQ):
407 6th Block, 2nd Main Rd, MMDA Colony, Chennai, Tamil Nadu - 600095, India.
Contact: +91 78068 21856
Indiquer RCM LLC (US Operations):
127 N Higgins Ave, Ste 307d #2796, Missoula, Montana 59802, USA.
Contact: +1 469 577 1619
United Kingdom Office:
Office 20567, 182-184 High Street North, East Ham, London E6 2JA, UK.
Contact: +44 1202 282031

For privacy inquiries, contact our Data Protection Officer at connect@indiquergrc.com.

2. Information We Collect

Contact and Identity Information: Name, business email, telephone number, organization name, job title, and geographic jurisdiction.
Demo and Requirement Inquiries: Compliance frameworks targeted (e.g. SOC 2, HIPAA, ISO 27001), cloud provider architecture (AWS, Azure, GCP), and target audit schedules submitted via forms.
Website and Diagnostic Telemetry: Anonymized technical logs, IP address, device specifications, browser type, referral paths, and interface engagement metrics.
AI Assistant Interactions: Queries submitted to the Indiquer AI Copilot demo for the purpose of answering compliance queries and improving model responses.

3. Purpose and Legal Bases for Processing

We process personal data under legitimate business interests, contractual necessity, or with explicit consent:

To provide customized demonstrations, technical architecture reviews, and follow-up communications.
To verify enterprise identity and enforce security safeguards against unauthorized access.
To fulfill legal obligations under GDPR, India DPDP Act 2023, and applicable US state data privacy statutes.

4. Customer Production Data & Protected Health Information (PHI)

Zero-Storage Security Architecture: IndiquerGRC never accesses, replicates, or stores customer production datasets or patient health records. Our compliance agents inspect configuration metadata, IAM permissions, and cryptographic hash proofs necessary for automated audit verification.

5. International Data Transfers & Safeguards

Because Indiquer operates across India, the United States, and the United Kingdom, data may be transferred internationally with appropriate Standard Contractual Clauses (SCCs), encryption in transit (TLS 1.3), and strict role-based access controls.

6. Your Privacy Rights

Depending on your jurisdiction (e.g. EU/UK GDPR, California CCPA, India DPDP), you possess rights to access, rectify, port, or request deletion of your personal data. To submit a request, visit our Data Deletion Request Portal or email connect@indiquergrc.com.

7. Security Safeguards

We maintain comprehensive technical and organizational controls including end-to-end encryption (TLS 1.3, AES-256), multi-factor authentication, regular penetration testing, and continuous audit monitoring.