Security and compliance
Sovereign Byte is built for teams that need their data kept in India and returned exactly as stored. Here is what we do today to keep your files safe, private and intact.
Encrypted and isolated
Your files are stored encrypted and sent over secure connections. Every request is checked against your account, so no one else can see, search, download or delete your files. Searches are read-only and sealed off from everything except the file you chose.
Your data stays in India
Your files, records and searches stay in Mumbai, India, and are never copied to other countries. The dashboard sends your data straight there. Our website pages and Google sign-in are served from outside India, but they never receive or store your files.
Checked for accuracy
Before we replace a stored file with a smaller copy, we check that the copy gives back exactly the same file. Archives made with our desktop app carry a digital fingerprint that is checked every time they are read; if anything doesn't match, you get an error, never wrong data.
No lock-in
Download your original files at any time, exactly as you uploaded them. Deleting a file removes it and every copy we made of it.
Compliance status
What is in place today, and what isn't yet. Ask us for details for your own review.
| Where your data lives | Mumbai, India, in Amazon Web Services (AWS). Your files, records and searches never leave that region. |
|---|---|
| Encryption | Stored encrypted (AES-256) and sent over secure connections (HTTPS). |
| Access | Every request is checked against your account. Searches are read-only and can only see your own files. |
| Backups | Account and file records can be restored to any point in the last 30 days. Deleted files may stay in backups for up to 30 days, as our privacy policy says. |
| Deletion | Delete any file at any time from the dashboard. Ask us by email to delete your whole account. |
| Availability | Live checks on our public status page. |
| DPDP Act, 2023 | There is no DPDP certificate to hold. Your data stays in India, you decide what is kept and deleted, and we use it only to run the service for you. |
| RBI / SEBI rules | We don't hold a regulatory approval. Keeping data in India helps with data-localisation reviews; we can share how our service handles data for yours. |
| SOC 2 / ISO 27001 | Not certified yet. |