Vinod

Security Overview

TrainPlex treats client-data confidentiality and worker privacy as core operating principles, and our security program is aligned with India's Digital Personal Data Protection (DPDP) Act, 2023. Access control: Our platform enforces role-based access control with least-privilege database roles, segregating administrative and runtime access. Trainers only see the specific tasks assigned to them and never the full dataset. Confidentiality: Every AI Trainer signs a binding digital agreement covering confidentiality, non-disclosure, and acceptable-use before accessing any client work. Sensitive projects can run under additional NDA terms on request. Workforce vetting: All trainers complete identity (KYC) verification — including government ID, PAN, and bank verification — and pass a certification exam before becoming eligible for paid tasks. Infrastructure: Data is processed on dedicated, access-controlled servers with encrypted secrets management, regular backups, and continuous error/security monitoring. We support project-specific data isolation and on-platform-only handling, so data is never downloaded to personal devices. Data lifecycle: We annotate clients' proprietary data only and never resell or reuse it. On project completion, working data is purged according to the agreed retention policy. We are happy to complete client security questionnaires and sign DPAs as part of onboarding.