Security policy
How we protect your data
Effective July 2026 · GenWise TalentDev Private Limited, Bengaluru
The security of our users' data and personal information is of paramount importance to GenWise. We are committed to maintaining robust security measures to protect the integrity, confidentiality, and availability of the information we collect and store.
1. Data encryption
All data transmitted between your browser and our website is encrypted in transit using TLS. This protects sensitive information — such as enquiry details and contact information — from being intercepted by unauthorized parties.
Sensitive data stored in our systems is encrypted at rest using industry-standard encryption, so that even if storage were compromised, the data remains unreadable without the appropriate keys.
2. Access control
Access to sensitive data within our organization is restricted based on role: only authorized personnel with a legitimate need are granted access rights.
Team members accessing administrative areas or sensitive data are required to use multi-factor authentication.
We apply the principle of least privilege, granting people and systems the minimum access necessary to perform their duties.
3. Breach response
We monitor for and respond to security incidents following a structured process to contain and mitigate impact.
In the unlikely event of a data breach, we will notify affected users as required by applicable laws and regulations, including the nature of the breach, the data affected, and steps users can take to protect themselves.
4. Secure development
Our development practices guard against common vulnerabilities such as SQL injection, cross-site scripting (XSS), and cross-site request forgery (CSRF), and changes are reviewed before reaching production.
We continuously monitor the security landscape and promptly apply security patches and updates to our systems.
5. Vendors and infrastructure
Our data is hosted with providers operating secure data centers with strict access controls, continuous monitoring, and redundancy. We expect vendors who handle sensitive data on our behalf to implement equivalent or better security measures.
6. Compliance
We comply with applicable data-protection laws and regulations, and hold ourselves to the DPDP Act's standard for children's data — described in detail in our privacy policy.
7. Reporting a security issue
We welcome reports of potential security issues. Write to gifted@genwise.in with the details — we read every report.