Security is the product.
cmplihr.ai is engineered for Indian enterprises handling sensitive statutory records. Data stays in India, tenants are isolated, and every action is auditable.
All data — primary, replica and backup — stays within Indian regions.
- India-located primary region
- In-region backups
- No cross-border processing
Every row, query and object is scoped by tenant ID — enforced at the data layer.
- Row-level security
- Tenant-aware service context
- Default-deny authorisation
Envelope encryption with tenant-scoped keys and scheduled rotation.
- AES-256 at rest
- TLS 1.2+ in transit
- KMS-managed data keys
Fine-grained roles per module, with attribute-based policies.
- Least-privilege by default
- SSO-ready (SAML / OIDC)
- Just-in-time elevation
Immutable and exportable, covering every user and system action.
- Signed event log
- Who, what, when, where
- SIEM-ready export
Secure SDLC, isolated environments, change controls and external VAPT.
- Environment separation
- Peer code review
- External VAPT on cadence
How a request flows through the platform.
Every request crosses tenant-aware boundaries before reaching encrypted, in-region storage — with a signed audit trail and human sign-off on every consequential output.
Certifications on roadmap. Statutory alignment, today.
cmplihr.ai is designed against recognised information-security frameworks. Certifications are in active build; statutory alignment is operational today.