Trust center
Security and privacy, described factually.
This page describes our practices. It does not claim certifications we do not hold; when formal attestations exist, they will be listed here with their scope.
Practices
How we protect systems and data
Access control
Role-based access with least privilege. Multi-factor authentication for privileged accounts where supported.
Data protection
Encryption in transit. Secrets kept in managed stores, never in source code.
Audit trails
Administrative and sensitive actions are recorded with who, what and when.
Secure development
Server-side validation, dependency and secret scanning, and security review before release.
Data minimisation
We collect only what a workflow needs. Website analytics never receive names, emails, phone numbers or messages.
Sensitive data
Our marketing forms must not be used to share patient records, student data or financial credentials.
Reporting a security concern
If you believe you have found a vulnerability in a Medhavya system, please contact us through the form and choose “General enquiry”. Do not include exploit details or personal data in the first message; we will arrange a secure channel.