Terms & ConditionsPrivacy PolicySecurity
SECURITY

Enterprise-grade security.
Built for Indian data ops.

Your leads, your customers' data, and your business operations deserve the highest level of protection. Here's exactly how GrowthEye keeps your data safe.

99.9%
Uptime SLA
Growth & Scale plans
AES-256
Encryption
At rest & in transit
72h
Breach notice
Legally required
SECURITY CONTROLS

How we protect your data.

Eight layers of protection, designed for high-stakes sales operations.

🔐
Encryption at rest & in transit

All data is encrypted at rest using AES-256. All data in transit uses TLS 1.2 or higher. Database backups are encrypted before storage.

AES-256TLS 1.2+Encrypted backups
🏢
Indian data residency

Your data is stored in ISO 27001-certified data centres located in India. We do not transfer Customer Data outside of India without explicit consent.

Mumbai DCHyderabad DCISO 27001
👥
Access controls & permissions

Granular role-based access controls (RBAC) let you limit what each team member can see and do. Custom roles available on Scale plan.

RBACCustom rolesSeat-level perms
📋
Audit logs

Every action (logins, data exports, settings changes, lead edits) is logged with user, timestamp, and IP. Retained for 12 months.

Full event logIP tracking12-month retention
🔑
Single Sign-On (SSO)

Integrate with your organisation's identity provider via SAML 2.0. Enforce MFA, session policies, and access revocation from one place.

SAML 2.0Google WorkspaceAzure ADScale plan
🛡️
Penetration testing

We conduct annual third-party penetration tests and quarterly internal security reviews. Findings are remediated within 30 days.

Annual pen testThird-party auditor30-day SLA
💾
Backups & disaster recovery

Automated daily backups with point-in-time recovery. RPO of 1 hour, RTO of 4 hours. Backups tested quarterly.

Daily backupsRPO 1hRTO 4h
🚨
Incident response

We maintain a documented incident response plan. In case of a breach affecting your data, we notify you within 72 hours as required by applicable law.

72h breach noticeDocumented IRPDedicated team
COMPLIANCE

Standards & certifications.

ISO 27001
Infrastructure provider certified
Compliant
IT Act, 2000
Compliant
Compliant
DPDP Act, 2023
Compliant
Compliant
GDPR
Available with DPA on request
Compliant
SOC 2 Type II
Audit in progress, Q4 2026
In progress
PCI DSS
Not applicable, payments via Razorpay
N/A
INFRASTRUCTURE

Built on trusted Indian cloud infrastructure.

GrowthEye is hosted on enterprise-grade cloud infrastructure with data centres located exclusively in India, ensuring compliance with Indian data localisation requirements.

Primary data centre: Mumbai
Disaster recovery: Hyderabad
ISO 27001 & SOC 2-certified facilities
DDoS protection at the network layer
WAF with OWASP Top 10 protection
Private network with VPC isolation
Uptime (last 90 days)99.98%
Avg. API response time142 ms
Last incident47 days ago
Backup success rate100%
RESPONSIBLE DISCLOSURE

Found a security issue?

We welcome responsible disclosure of security vulnerabilities. Please email our security team, and we'll investigate and respond within 48 hours.

security@growthrye.inContact sales