Trust & Security

Trust, built into every byte.

Vishwaas AI is operated by IdentityPlus Pvt. Ltd. and backed by the Cross Identity team. India-resident, HSM-signed, and architected to be the regulator's primary source of evidence.

Our security posture.

India data residency

Primary deployment in ap-south-1 (Mumbai). Optional read-replicas in ap-south-2 (Hyderabad) for §16 residency-sensitive tenants.

Encrypted at rest

AES-256-GCM field-level encryption for PII. Per-tenant KMS key — compromising one tenant's keys never affects another.

Encrypted in transit

TLS 1.3 only. Certificate transparency monitored. HSTS preloaded.

HSM-backed signing

RSA-2048 consent signing keys held inside AWS KMS HSM. Keys never leave hardware.

Cross Identity backing

Built and operated by IdentityPlus Pvt. Ltd. — the team behind Cross Identity, India's enterprise identity platform.

VAPT-hardened

Quarterly third-party penetration testing. v2.7 P4B fixes applied. Detailed threat model available under NDA.

Security review pack available on request.

Threat model, penetration test summaries, architecture diagrams, SOC roadmap — all under NDA. Reach out for the full pack.