Achintya

Security Overview

1. Data Governance & Architecture As a newly established MSME specializing in AI data annotation and localization, we operate under a strict "Zero-Storage, Zero-Hosting" architecture. Zero Data Retention: Our organization does not download, copy, or maintain local repositories of proprietary client training data. All data remains inside the client’s designated secure cloud or integrated annotation platforms (such as Labelbox, CVAT, or Argilla). Environment Isolation: Our workforce only interacts with data via secure web links or secure API-driven interfaces provided by the client. Once a text, audio, or document task is completed, it is immediately synced back to the client pipeline, leaving zero trace on our local setups. 2. Workforce & Intern Security Controls Our unique workforce model leverages highly supervised degree college students and interns. To maintain strict data integrity and confidentiality, we enforce the following protocols: Legal Protections (NDAs): Every single intern, manager, and administrator is legally bound by a comprehensive Non-Disclosure Agreement (NDA) before they are given access to the workspace or any project guidelines. Access Control: We enforce the Principle of Least Privilege (PoLP). Interns are granted workspace access only to the specific data batches they are actively auditing. They do not have cross-project visibility. Supervised Workspaces: Annotation work is conducted in controlled environments (including designated institute lab facilities) under the direct supervision of project leads. The use of personal storage devices, external drives, or unauthorized screen capture software is strictly prohibited during active shifts. 3. Privacy & International Compliance Standards We ensure that our local workflows align seamlessly with global data protection requirements, making us a safe partner for international AI developers. GDPR & PII Protection: Our team is explicitly trained on data minimization practices. We do not extract, store, or process Personally Identifiable Information (PII). If any accidental PII is encountered in raw text or audio documents, our workforce is trained to immediately flag it for data masking or redacting. Incident Management: In the highly unlikely event of a workflow anomaly or access discrepancy, our internal management implements an immediate freeze on the affected pipeline, logs the event, and coordinates directly with the client's engineering team for instant remediation. 4. Infrastructure & Digital Hygiene Credential Security: All administrator and project manager accounts within our OpenTrain business workspace utilize strict Multi-Factor Authentication (MFA). Secure Networks: Our internal management teams access tracking panels solely over encrypted, secure networks, eliminating vulnerabilities from open or public internet connections.

Security Credentials