India: Digital Personal Data Protection Act, 2023 (DPDP)
As an Indian incorporated enterprise headquartered in Chennai, Tamil Nadu, Indiquer functions as both a Data Fiduciary (for direct client and platform user data) and a Data Processor (for enterprise client data processed under SLA):
- Purpose Limitation: Data is gathered solely for specific, lawful purposes explicitly outlined at the point of collection.
- Notice & Affirmative Consent: Notice is provided in clear language with granular consent checkboxes before capturing information.
- Data Principal Rights: Full mechanisms enabling Data Principals to access summary records, correct inaccurate data, and nominate representatives.
- Statutory Grievance Redressal: Dedicated, named Grievance Officer in Chennai with a binding 30-day resolution timeline.
European Union & United Kingdom: GDPR Compliance
For European and UK enterprise engagements, Indiquer ensures full alignment with the General Data Protection Regulation (Regulation EU 2016/679 and UK Data Protection Act 2018):
- Standard Contractual Clauses (SCCs): Cross-border data transfers between European partners and our Indian delivery centers are governed by the European Commission's approved Standard Contractual Clauses.
- Technical & Organizational Measures (TOMs): Enforced end-to-end cryptographic controls, least-privilege role segregation, and immutable audit trails.
- 72-Hour Breach Notification: Established incident response protocols committing to inform regulatory bodies and affected partners within seventy-two (72) hours of any verified security incident.
United Arab Emirates: Federal Decree-Law No. 45 of 2021 (PDPL)
In serving partners across the UAE and GCC region, our data pipelines and operational services comply with the UAE Personal Data Protection Law:
- Cross-Border Transfer Adequacy: Ensuring data transfer safeguards meet UAE Data Office standards for commercial partners in Dubai and Abu Dhabi.
- Processing Transparency: Clear declarations of processing purposes, retention criteria, and data subject rights.
United States: Healthcare & HIPAA Compliance (Indiquer RCM LLC)
For our specialized healthcare operations, medical billing, and Revenue Cycle Management (RCM) services operated through Indiquer RCM LLC (Missoula, MT), we enforce rigorous compliance with the Health Insurance Portability and Accountability Act (HIPAA) and HITECH:
| HIPAA Rule | Implementation at Indiquer |
|---|---|
| Privacy Rule | Strict policies prohibiting unauthorized use, disclosure, or transmission of Protected Health Information (PHI). |
| Security Rule | Mandatory AES-256 encryption at rest, TLS 1.3 in transit, automatic screen lockouts, and biometric clean-room facility access for billing specialists. |
| Business Associate Agreements (BAAs) | Formal execution of comprehensive BAAs with all US healthcare providers, covered entities, and downstream clearinghouses. |
| Breach Notification Rule | Mandatory rapid incident escalation and notification workflows compliant with 45 CFR §§ 164.400-414. |
ISO & SOC 2 Security Control Alignment
Our internal development and infrastructure operations follow globally recognized security baselines:
- SOC 2 Trust Services Criteria: Security, Availability, and Confidentiality controls.
- ISO/IEC 27001:2022: Information Security Management System (ISMS) framework across all software delivery centers.
- Zero-Trust Architecture: Microsegmentation, WireGuard encrypted mesh networking (Tailscale), and mandatory Multi-Factor Authentication (MFA) on all developer environments.
Statutory Grievance & Compliance Officer
In accordance with the India DPDP Act 2023, Information Technology Rules 2011, and GDPR directives:
Karen Jebapriya, Director - Operations & HR
Indiquer Global Service Private Limited
407 6th Block, 2nd Main Rd, MMDA Colony, Chennai, TN 600095, India
Direct Compliance Email: compliance@indiquer.in / dpo@indiquer.in
Hotline: +91 78068 21856