Where can I find complete details about ADDA’s security, compliance, audits, backups, and data privacy?

Where can I find complete details about ADDA’s security, compliance, audits, backups, and data privacy?

You can find everything in the ADDA Trust Center. Key points are:

  • Certifications & Audits: ADDA is ISO/IEC 27001:2022 certified (June 17 2025), previously ISO/IEC 27001:2013 (May 14 2025). It undergoes monthly internal security tests (VAPT) and annual independent audits, most recently by Bulwarkers on May 28 2025.

  • Infrastructure & Backups: Hosted on Amazon Web Services (AWS) with compliance to ISO 27017, ISO 27701, and ISO 27018. AWS provides DDoS protection, encryption, monitoring, and auto-scaling. Daily encrypted backups are taken for critical operations (like payments) and monthly for non-critical ones. Stored in Amazon Glacier with a maximum 24-hour Recovery Point Objective.

  • Payment Security: ADDA uses PCI-DSS compliant gateways (Razorpay, Cashfree, Stripe, PayFort, Braintree). All transactions are encrypted and transmitted securely.

  • Compliance & Privacy: ADDA aligns with GDPR, HIPAA, and PCI DSS, and is mapped to CSA STAR Self-Assessment. Users retain complete ownership of their data—ADDA states “Your Data Belongs to You. Always.”

  • Support Contacts:

The Trust Center exists to provide transparency, demonstrate compliance, and give users quick access to ADDA’s security and privacy practices.