Deepsoch AI designs, builds, and operates infrastructure end to end. Because we run the hardware ourselves, our security is the sum of decisions made at every layer: hardware, network, operating system, application, and process.
Our primary cluster is self-hosted in a climate-controlled lab in Mumbai. We own the CPUs, GPUs, network switches, storage, and UPS infrastructure. Lab access is restricted to named staff only. Out-of-band management interfaces are segmented off the production network. Redundant power, cooling, and network paths with documented failover runbooks.
All traffic encrypted using TLS 1.2+ with HSTS on public endpoints. Data at rest in Postgres and object storage encrypted on-disk. Secrets stored in a secrets manager, never in source control. File uploads written to object storage with restricted bucket policies and signed URLs.
Role-based access control (RBAC) and principle of least privilege. SSO for all internal tooling. MFA required for administrative access. SSH via short-lived audited credentials on jump hosts. Access reviews quarterly and on every role change.
24/7 cluster, network, and application health monitoring. Audit logs retained for 12 months. Alerting on authentication failures, privilege changes, unusual data-access patterns.
Written incident-response plan covering detection, triage, containment, remediation, communication, and post-mortem. If a breach affects personal data, we notify affected parties per the Indian Digital Personal Data Protection Act 2023.
Every change goes through peer review before shipping. Automated static analysis and dependency scanning on pull requests. Input validation at server boundary. Regular dependency upgrades.
Production databases backed up daily with point-in-time recovery. Backups encrypted and tested by restore drills.
Committed to the Indian Digital Personal Data Protection Act 2023. Building towards SOC 2 Type II and ISO/IEC 27001.
Email contact@deepsoch.ai with a description, impact, and steps to reproduce. Give us 90 days before public disclosure. We acknowledge within 3 working days.
