The answers your security review will ask for
Before anyone uploads firmware, your security team will ask where it lives, who can process it and which documents back that up. The answers are here. FDIE by Magdox is hosted in India.
The short answers
Data location
Agreed with you
Hosted in India unless your contract sets another location
Sign-in
Two-step
On every way of signing in, for every account
Isolation
Per organisation
Enforced by the database, not only the app
Breach notice
48 hours
At most, to your organisation's owners
Database recovery
14 days
Point-in-time recovery, kept in India
AI training
Never
Your data trains no model, ours or anyone else's
Who processes your data
Customer content stays in India. These providers run parts of the service; the Subprocessors page lists what each one receives.
Providers of the service
- Amazon Web Services India Private Limited and Amazon Web Services, Inc. (AWS)India
- Amazon Web Services (Amazon CloudFront and AWS WAF)Global edge network
- Amazon Web Services (Amazon SES)India; recipients' own mail systems may be elsewhere
- Cloudflare, Inc.Global network
- Functional Software, Inc. (Sentry)USA
- Zoho Corporation Private Limited (Zoho Mail)India
- Zoho Corporation Private Limited (Zoho CRM, Zoho Desk and Zoho Campaigns)India
The law we follow, and what we hold
- Data protection law
- Section 43A of the IT Act, 2000 and the SPDI Rules today; the DPDP Act, 2023 from 13 May 2027
- Incident reporting
- To CERT-In within six hours of noticing an incident, under its Directions of 28 April 2022
- ISO 27001 and SOC 2
- Not held today. We answer your security questionnaire.
- Vulnerability reports
- Responsible disclosure policy with safe harbour and a hall of fame
Everything your review needs
Every document is public, so you can check them before you sign. For a questionnaire or a call with our security team, write to security@magdox.io.
- Security team
- security@magdox.io
- Privacy
- privacy@magdox.io
- Grievance Officer
- Manish Sharma, grievance@magdox.io