Mindpex Security Overview

Enterprise-Grade Security & Data Protection

Mindpex is built with a security-first architecture designed to protect sensitive workforce data and ensure enterprise-grade reliability.

We follow industry best practices to safeguard data across its entire lifecycle — from ingestion to analysis to storage.

Data Protection Principles

• Data minimization: Only necessary data is processed
• Purpose limitation: Data is used strictly for analytics and insights
• Privacy by design: Security and privacy are embedded into the system architecture
• No employee surveillance: Mindpex does not track personal activity or monitor individuals

Encryption & Data Security

• Data is encrypted in transit using TLS (HTTPS)
• Data is encrypted at rest using industry-standard encryption
• Secure key management practices are followed
• Protection against unauthorized access and data leakage

Access Control & Authentication

• Role-based access control (RBAC)
• Least-privilege access enforcement
• Secure authentication mechanisms for platform access
• Internal access is restricted and audited

Data Isolation

• Each client's data is logically isolated
• No cross-client data access
• Multi-tenant architecture with strict separation controls

Infrastructure & Hosting

• Hosted on secure, enterprise-grade cloud infrastructure (e.g., AWS / GCP)
• High availability and reliability architecture
• Continuous monitoring and system hardening

Application Security

• Secure development practices followed
• Regular code reviews and testing
• Protection against common vulnerabilities (OWASP standards)

Monitoring & Incident Response

• Continuous monitoring of system activity
• Logging and anomaly detection mechanisms
• Incident response procedures in place
• Rapid response to potential threats

Data Processing & Compliance

Mindpex operates as a data processor on behalf of its enterprise clients.

• Data is processed only as instructed by the client
• No unauthorized data sharing
• Support for data access and deletion requests

Designed in alignment with:

• General Data Protection Regulation (GDPR)
• India Digital Personal Data Protection Act (DPDP Act)

AI & Decision-Making Transparency

Mindpex provides predictive insights, not automated decisions.

• All outputs are advisory and probabilistic
• Final decisions remain with human stakeholders

Subprocessors

Mindpex may use trusted third-party infrastructure providers (e.g., cloud hosting providers) strictly for service delivery.

All subprocessors are required to maintain high security and data protection standards.

Contact

For security-related questions or concerns:
contact@mindpex.com