Security

Built so you can trust an AI with customer conversations.

Security is a daily practice, not a checklist. Here's a transparent view of how we protect your data today.

Encryption everywhere

TLS 1.2+ in transit. AES-256 at rest. Secrets stored in a managed vault, never in source.

Row-level access

Every record is scoped to the owning account. Database-enforced via row-level security policies.

Audited infrastructure

Hosted on managed cloud infrastructure with regional data residency in India where applicable.

DPDP-aware by design

Built with the Digital Personal Data Protection Act, 2023 in mind — consent, retention and grievance handling.

Responsible disclosure

Found a security issue? Please email security@zudako.in with details and steps to reproduce. We will acknowledge within 2 business days and keep you updated.

Please do not run automated scanners against production. Test only against accounts you own.

Certifications & compliance

We're an early-stage company and do not yet hold third-party certifications such as SOC 2 or ISO 27001. Our roadmap prioritises DPDP Act readiness, then ISO 27001 and SOC 2 as we scale. We're happy to share our current security posture with prospective customers under NDA.