Compliance

01Digital Personal Data Protection Act, 2023

We build to the principles of India's DPDP Act: collect only what is needed, use it for the stated purpose, keep it accurate, secure it, and honour requests from the people it belongs to. Our privacy policy sets out the rights you can exercise and how to reach us.

02Fiduciary and processor roles

When an institute enrols its students, the institute decides the purpose of that data and Examlytics processes it on the institute's behalf. We can sign a data processing agreement that records this.

03Minors

Because many students are under 18, we support collecting guardian consent through the institute and we do not use minors' data for advertising or behavioural tracking.

04Data location

Our database and application are hosted with managed cloud providers. If your institute has data location requirements, tell us before onboarding and we will confirm the hosting region that applies to your account.

05Documents for institutes

• Data processing agreement on request.
• List of sub-processors on request.
• Security questionnaire responses for your procurement team.
• Deletion of your roster and results when the agreement ends.

06Certifications

Examlytics does not currently hold a third-party certification such as ISO 27001 or SOC 2. We will say so plainly when that changes, and we will not display a badge we have not earned.

07Grievance contact

For compliance questions, data requests or grievances, write to hello@examlytics.in. We aim to reply within a few working days.