Laws and codes we follow
| Area | India | Malaysia | Singapore | Australia | United States | EU and UK |
|---|---|---|---|---|---|---|
| Privacy | DPDP Act 2023 and DPDP Rules 2025 (phased); IT Act 2000 and SPDI Rules 2011 | PDPA 2010 as amended in 2024 | PDPA 2012 | Privacy Act 1988 (APPs) where it applies | State privacy laws where they apply | GDPR and UK GDPR where they apply |
| Advertising and claims | ASCI Code | Malaysian Code of Advertising Practice | Singapore Code of Advertising Practice | Australian Consumer Law | FTC Act, endorsement guides, rule on fake reviews | Consumer protection law |
| Marketing messages | TRAI commercial communication rules | PDPA direct marketing rules | Do Not Call provisions, Spam Control Act | Spam Act 2003, Do Not Call Register Act | CAN-SPAM, TCPA | ePrivacy rules |
| Cyber incidents | CERT-In directions (6-hour reporting) | Cyber Security Act 2024 (where applicable) | Cybersecurity Act (where applicable) | Notifiable Data Breaches scheme | State breach laws | GDPR Art. 33 |
Certifications
| Certification | Status |
|---|---|
| ISO/IEC 27001 | Not held. [Planned start date, if any] |
| SOC 2 Type II | Not held |
| Cyber Essentials (UK) | Not held |
We will update this page only when a certificate is issued, with the certifier's name and certificate number.