GOALCRYST INDIA PRIVATE LIMITED

Security Overview

Goalcryst India Private Limited maintains a comprehensive information security framework designed to protect client data in AI annotation and model training projects. Our controls are aligned with industry best practices and structured around security principles consistent with SOC 2 trust service criteria (security, confidentiality, and availability). Administrative Controls: All employees sign legally binding Non-Disclosure Agreements (NDAs) and undergo background verification prior to onboarding. Mandatory information security and data privacy training is conducted periodically. Access to client data is granted strictly on a need-to-know basis under Role-Based Access Control (RBAC) and least-privilege principles. Physical Security: Our facilities are protected by 24/7 CCTV surveillance and controlled access systems. Production areas are restricted to authorized personnel only. Personal devices and removable media are prohibited in secure work zones. A strict clean desk policy is enforced. Technical Safeguards: We maintain a secure network infrastructure protected by enterprise-grade firewalls, endpoint protection, and regularly updated antivirus solutions. Secure encrypted protocols (VPN, HTTPS, SFTP) are used for all data transmission. USB ports and unauthorized downloads are restricted. Systems are regularly patched, and access rights are periodically reviewed. Monitoring & Incident Management: System activity logs are monitored to ensure accountability. Internal audits and security reviews are conducted periodically. Formal incident response procedures are in place for timely detection, reporting, and remediation. Secure data retention and certified deletion protocols are followed upon project completion. Goalcryst is committed to maintaining confidentiality, integrity, and availability of client information in alignment with globally recognized security standards.

Security Credentials