Security & Trust

Privileged data, protected like privilege demands.

Your matters carry attorney–client privilege. Anura is engineered for it - encrypted end to end, stored on Indian soil, and built to the Digital Personal Data Protection Act, 2023.

DPDPA 2023 AES-256 MFA India data residency SOC 2 (in progress)

Encryption everywhere

AES-256 at rest and TLS 1.2+ in transit. Documents, notes, and case data are encrypted end to end.

Data residency in India

All data is stored and processed in Indian regions (AWS Mumbai / Azure Central India). It does not leave the country. Read the policy →

Multi-factor auth

MFA on every account, granular role-based access, and session controls keep the wrong eyes out.

Full audit trail

Every access and every agent action is logged and attributable - including who approved each filing-grade step.

Backups & resilience

Automated, encrypted backups with point-in-time recovery so a deadline is never lost to an outage.

Least-privilege access

Internal access to customer data is restricted, logged, and granted only when needed for support you request.

Compliance

Anura is designed to help Indian law practices meet their obligations under the Digital Personal Data Protection Act, 2023, including consent, purpose limitation, and data-principal rights. See our DPDPA Compliance overview.

DPDPA 2023-aligned data handling and consent
Indian data residency by default
SOC 2 Type II - in progress
Subprocessor list available on request

Responsible disclosure

Found a vulnerability? We want to hear from you. Report it privately and we'll acknowledge within two working days and keep you updated through to resolution. Please do not publicly disclose until we've had a chance to fix it.

Email security@anura.app with steps to reproduce. We do not pursue good-faith researchers who follow this policy.