Security & DPDP

The case file is privileged. We treat it that way.

Nyaya is built for lawyers, which means privilege is a design constraint, not a checkbox. Here’s exactly how we hold up our end.

Encryption at rest and in transit

All your matters, drafts, and documents are encrypted with AES-256 at rest. TLS 1.3 in transit. Keys are rotated quarterly via Cloud KMS.

Data residency in Mumbai

Your data lives in Google Cloud’s asia-south1 region. We do not export it to a foreign jurisdiction unless you explicitly export it yourself.

We don’t train on your data

Drafts, uploads, and chats with Nyaya are never used to train any model — ours or any provider’s. Period.

Per-matter access control

On Firm plans, every matter can be locked to a need-to-know set of users. Audit log shows who saw what, and when.

DPDP Act, 2023 ready

Consent records, data-principal request workflow, and a designated grievance officer — built in.

Privilege & professional responsibility

We treat your work as confidential by default. Subpoenas are pushed back on; we will tell you before disclosure unless legally barred.

Grievance officer

Under Rule 5(9) of the SPDI Rules and Section 10 of the DPDP Act, we appoint a Grievance Officer to receive and dispose of any complaints regarding personal data within 15 days.

Office of the Grievance Officer
Nyaya AI Technologies Pvt. Ltd.
4F, HM Tradus, Lavelle Road, Bengaluru 560 001
grievance@nyaya.ai