Security & Compliance

Rediffmail Enterprise and Rediffmail Pro are committed to maintaining the highest standards of security and operational excellence. Our SOC 2 Type II Report certification demonstrates that our controls for protecting customer data have been independently audited over a defined period and found to be effective in accordance with the AICPA’s Trust Services Criteria.

Unlike a point-in-time assessment, a SOC 2 Type II Report audit evaluates both the design and the operational effectiveness of security controls, providing customers with additional assurance that these controls are consistently followed in practice.

Our SOC 2 Type II Report certification provides assurance that:

• Security controls are independently tested for effectiveness over time
• Customer data is protected through well-defined security policies and procedures
• Risks are continuously monitored and managed through established governance processes
• Access to systems and information is managed using controlled access practices
• Security incidents are addressed through documented response procedures
• Operational processes are regularly reviewed to support ongoing compliance and continuous improvement

By maintaining SOC 2 Type II Report certification, Rediffmail Enterprise demonstrates its commitment to safeguarding customer information and delivering secure, reliable services through independently validated security and operational controls.

Rediffmail Enterprise and Rediffmail Pro are committed to protecting customer information through robust information security practices. Our ISO/IEC 27001 certification demonstrates that our Information Security Management System (ISMS) has been independently audited and verified to meet the requirements of the internationally recognized ISO/IEC 27001 standard.

The certification reflects our systematic approach to managing information security risks across our people, processes, and technology, ensuring the confidentiality, integrity, and availability of information.

Our ISO/IEC 27001-certified ISMS helps ensure:

• A structured and risk-based approach to information security
• Policies and controls designed to protect customer information
• Regular risk assessments and continuous security improvements
• Security awareness and governance across the organization
• Established incident management and business continuity processes
• Ongoing independent audits to verify compliance with the standard

By maintaining ISO/IEC 27001 certification, Rediffmail Enterprise reinforces its commitment to delivering secure and reliable services through internationally recognized information security best practices.

Rediffmail Enterprise and Rediffmail Pro are committed to delivering reliable, well-managed IT services. Our ISO/IEC 20000-1 certification demonstrates that our Service Management System (SMS) has been independently audited and verified to meet the requirements of the internationally recognized ISO/IEC 20000-1 standard.

The certification reflects our structured approach to planning, delivering, and improving IT services, ensuring consistent service quality and alignment with customer and business needs.

Our ISO/IEC 20000-1-certified Service Management System helps ensure:

• Well-defined processes for planning and delivering IT services
• Clear service commitments backed by defined service levels
• Structured incident, problem, and change management practices
• Continuous monitoring and improvement of service performance
• Alignment of IT services with customer and business requirements
• Regular independent audits to verify compliance with the standard

By maintaining ISO/IEC 20000-1 certification, Rediffmail Enterprise reinforces its commitment to dependable, high-quality IT service delivery through internationally recognized service management practices.

Rediffmail Enterprise and Rediffmail Pro are committed to protecting the privacy of personal information entrusted to us. Our ISO/IEC 27701 certification demonstrates that our Privacy Information Management System (PIMS) has been independently audited and verified to meet the requirements of the internationally recognized ISO/IEC 27701 standard.

Built as an extension of our ISO/IEC 27001-certified ISMS, the certification reflects our structured approach to managing privacy risks and handling personal data responsibly across our services.

Our ISO/IEC 27701-certified PIMS helps ensure:

• A structured, risk-based approach to privacy management
• Clear accountability for how personal data is collected, used, and protected
• Privacy controls aligned with globally recognized best practices
• Defined processes for responding to data subject requests
• Privacy awareness and governance across the organization
• Ongoing independent audits to verify compliance with the standard

By maintaining ISO/IEC 27701 certification, Rediffmail Enterprise reinforces its commitment to safeguarding personal information and respecting the privacy of its customers and users.

Rediffmail Enterprise and Rediffmail Pro are committed to protecting personally identifiable information (PII) processed in the cloud. Our ISO/IEC 27018 certification demonstrates that our cloud privacy controls have been independently audited and verified against the internationally recognized ISO/IEC 27018 code of practice.

The certification reflects cloud-specific safeguards for PII, giving customers confidence that personal data processed by our services is handled transparently and protected through recognized best practices.

Our ISO/IEC 27018 certification provides assurance that:

• Cloud-specific controls protect personally identifiable information
• Customers have transparency into where and how their data is processed
• Customer data is not used for advertising or unrelated purposes
• Defined processes exist for notifying customers of data-related events
• Strict controls govern subcontractors and data disclosure
• Ongoing independent audits verify compliance with the standard

By maintaining ISO/IEC 27018 certification, Rediffmail Enterprise reinforces its commitment to protecting personal data in the cloud through internationally recognized privacy practices.

Rediffmail Enterprise and Rediffmail Pro are committed to responding to security events quickly and effectively. Our ISO/IEC 27035-1 certification demonstrates that our information security incident management processes have been independently audited and verified against the internationally recognized ISO/IEC 27035-1 standard.

The certification reflects a structured, end-to-end approach to incident management — from detection and assessment through response, recovery, and lessons learned.

Our ISO/IEC 27035-1 certification provides assurance that:

• Defined processes exist for detecting and reporting security events
• Potential incidents are rapidly assessed and classified
• Documented response procedures contain and resolve incidents
• Clear communication and escalation paths operate during an incident
• Post-incident reviews drive continuous improvement
• Ongoing independent audits verify compliance with the standard

By maintaining ISO/IEC 27035-1 certification, Rediffmail Enterprise reinforces its commitment to operational resilience and the rapid, effective handling of security incidents.