Compliance & Data Governance
At Zynocode Labs, we believe in complete operational clarity. This page defines our compliance status, how we comply with data protection regulations, and our verified sub-processors.
1. Certification Transparency: What We Do and Do Not Claim
We distinguish our internal engineering practices from independent third-party audited certifications:
No Formal SOC 2, ISO 27001, or HIPAA Badges: Zynocode Labs has NOT undergone independent third-party audits for SOC 2 Type II, ISO/IEC 27001, or HIPAA. We do not display certification logos or badges that we have not formally earned.
Operational Best Practices: While we do not hold formal audit certificates, our architecture adheres to standard secure software development lifecycle (SDLC) practices, strict principle of least privilege, automated vulnerability dependency audits, and complete client-side data minimization.
2. Data Protection & Privacy Alignment
Our engineering aligns with the European Union General Data Protection Regulation (GDPR) and the Indian Digital Personal Data Protection Act, 2023 (DPDP Act) through architectural minimization:
Most tools process files and text exclusively in client-side browser RAM. Because document payloads are not uploaded to or stored on our servers, server-side data breach exposure for those files is substantially eliminated, though users remain responsible for securing their local device and browser environment.
We never sell, rent, monetize, or train proprietary AI models on your files, images, code, or personal data. Your inputs belong strictly to you.
Registered users can permanently delete their account and associated metadata directly from their Account Settings, triggering automated database deletion across all related tables.
We use strictly necessary session cookies for authentication and payment security. We do not load third-party ad retargeting pixels or cross-site tracking scripts.
3. Verified Sub-Processors
Zynocode Labs engages the following third-party infrastructure providers to deliver our hosting, database, and payment processing services:
| Sub-Processor | Role | Location | Purpose |
|---|---|---|---|
| Vercel Inc. | Hosting, Serverless Compute & Edge CDN | United States / Global Edge | Delivers web application assets, executes stateless API routes, and enforces edge transport caching. |
| Neon Inc. | Serverless PostgreSQL Database | United States (AWS Region: us-east-1) | Stores registered user accounts, workspace memberships, and metadata. Encrypted at rest (AES-256) and in transit (TLS). |
| Razorpay Software Pvt. Ltd. | Payment Processing (INR) | India | Processes subscription and credit pack purchases in Indian Rupees. Certified PCI-DSS Level 1 compliant partner. |
| Cloudinary Inc. | Static Media & Logo CDN | United States / Global CDN | Optimizes and serves static platform iconography and marketing images. Zero customer document payloads handled. |
4. Data Processing Agreements (DPA)
For enterprise teams and institutional customers integrating the Zynocode Labs Tool API into customer-facing products, we provide a standard Data Processing Agreement (DPA) incorporating standard contractual clauses.
To request a countersigned DPA, contact our governance team at [email protected].
5. Legal Entity & Jurisdiction
Zynocode Labs is an engineering division of Zynocode IT Solutions, headquartered in Jaipur, Rajasthan, India. All platform operations and contractual terms are governed by the laws of India, with jurisdiction in the courts of Jaipur, Rajasthan.