Everything about how FieldGovern secures your data and meets India's DPDP Act 2023 — security architecture, compliance mapping, sub-processors, and system status, all in one place.
The Trust Centre indexes real, detailed pages rather than duplicating them — each link below is the authoritative source.
Authentication, encryption, tenant isolation, audit logging, and the offline-device security model.
View Security →A clause-by-clause mapping of the DPDP Act's obligations to FieldGovern's implemented controls.
View Compliance Mapping →Our standard DPA, pre-filled with FieldGovern's security commitments — ready for your legal team to review.
View DPA Template →Every third party FieldGovern uses that touches personal data — purpose, data categories, and country, kept current.
View Sub-processor List →| Data processor role | FieldGovern processes data on your instructions — you remain the data fiduciary. |
| Tenant isolation | Database-level row-level security via a restricted, non-superuser database role — not application-code filtering alone. |
| Encryption in transit | TLS 1.2+ and HSTS enforced on every connection. |
| Audit logging | Tamper-evident, hash-chained audit log with automated anomaly detection (repeated failed logins, off-hours access). |
| Consent | Itemised, versioned notice with per-purpose consent (survey / photo / audio / GPS), shown before the first question. |
| Data-principal rights | A dedicated workflow to log, search, act on, and close access/correction/erasure/portability requests, with SLA tracking. |
| Breach response | A written plan with defined roles, severity levels, and the CERT-In 6h / customer 24h / Board 72h timelines. |
| Self-hosting | Fully self-hostable via Docker Compose on infrastructure you control, if you'd rather not use our hosted service. |