Omnia Trust & Security Center

Enterprise Security. Total Data Sovereignty.

Your business operations require uncompromising confidentiality. Omnia is built on isolated tenant infrastructure, AES-256 encryption at rest, TLS 1.3 in transit, and an unyielding 90-day data retention guarantee.

Data EncryptionEnforced
AES-256 & TLS 1.3
Tenant ArchitectureActive
Isolated Schemas
Data GuaranteeGuaranteed
90-Day Retention
Cloud HostingTier-4
AWS Mumbai (ap-south-1)
Security Engineering

Six Layers of Enterprise Protection

From the physical data center tier to the individual UI input field, Omnia is engineered for defense-in-depth.

Zero Cross-Bleed

1. Isolated Tenant Architecture

Your business data is strictly partitioned into dedicated tenant schemas. Database connections and application middleware enforce isolated organization boundaries, preventing unauthorized data access or accidental cross-organization queries.

Dedicated PostgreSQL schema isolation per organization
Strict tenancy validation on every API request and database transaction
Isolated document attachment vaults with signed short-lived URLs
AES-256 & TLS 1.3

2. End-to-End Cryptographic Encryption

Every byte of data is encrypted in transit and at rest. We utilize AES-256 encryption at the volume and database block levels, and enforce TLS 1.3 with Perfect Forward Secrecy for all client-to-server traffic.

AES-256 encryption at rest for all database volumes and object storage
TLS 1.3 in transit with strict HTTP Strict Transport Security (HSTS)
Automated SSL/TLS certificate rotation and cipher suite hardening
Zero Trust RBAC

3. Granular Authentication & Access Control

Protect sensitive corporate assets with multi-factor authentication, enterprise Single Sign-On (SSO via SAML/OIDC), and role-based access down to individual fields, records, and approval ceilings.

Mandatory Multi-Factor Authentication (MFA / TOTP) support
Password hashing using memory-hard Argon2/bcrypt algorithms
Field-level masking (e.g. hide salary fields on shared project boards)
Point-in-Time Recovery

4. Automated Backups & Disaster Recovery

We perform continuous automated database replication and daily encrypted snapshots stored in geographically redundant AWS availability zones. In the event of an outage, our automated disaster recovery achieves RPO < 1 hour.

Continuous transaction write-ahead logging (WAL) for 30-day point-in-time recovery
Automated cross-availability-zone data replication
Quarterly disaster recovery simulations and integrity validation drills
No Data Hostage

5. 90-Day Retention Guarantee & Zero Lock-In

We believe you should always own your data. If your subscription is paused or a payment fails, your organization enters a 90-day read-only grace period. You can export complete JSON, CSV, and PDF backups anytime without penalty.

90-day read-only data grace period on subscription pauses
One-click full organization data export across all 7 solutions
Permanent cryptographic erasure guarantees upon verified account termination
Data Sovereignty

6. Indian DPDP Act 2023 & Privacy By Design

Omnia is designed from the ground up to comply with the Digital Personal Data Protection (DPDP) Act 2023. Data is hosted locally within AWS Mumbai (ap-south-1) data centers to ensure strict Indian data sovereignty.

Primary data residency in India (AWS Asia-South1 / Mumbai)
Strict purpose-limitation and automated consent tracking mechanisms
Zero data selling or third-party advertising telemetry
Compliance & Certification Status

Transparent Security Standards

We believe in complete transparency regarding our active security controls and our in-progress audit milestones.

Cryptographic StandardActive & Enforced

AES-256 Encryption at Rest

All relational database volumes, file uploads, and continuous backups are encrypted using FIPS 140-2 validated AES-256 algorithms.

Transport SecurityActive & Enforced

TLS 1.3 in Transit & HSTS

Strict HTTPS enforcement with modern TLS 1.3 cipher suites and Perfect Forward Secrecy across all web and mobile endpoints.

Privacy & Data ProtectionActive & Enforced

Indian DPDP Act 2023

Full adherence to purpose limitation, data minimization, consent logging, and Indian data residency (AWS Mumbai region).

Physical InfrastructureActive & Enforced

AWS Mumbai Tier-4 Hosting

Hosted on AWS Asia-South1 data centers featuring biometric access controls, redundant power arrays, and multi-AZ failovers.

Third-Party AttestationAudit In-Progress

SOC 2 Type II Audit

Currently undergoing formal independent AICPA Trust Services Criteria audit for Security, Availability, and Confidentiality.

Information Security ManagementOn Roadmap (Q4 2026)

ISO/IEC 27001

Implementing formal ISMS policies and control frameworks in preparation for accredited third-party certification.

Authorized Subprocessors

Strictly vetted third-party infrastructure providers

Updated Aug 2026
Amazon Web Services (AWS)Mumbai, India (ap-south-1)

Cloud Hosting, Database Storage & Compute

Certifications: ISO 27001, SOC 2, PCI-DSS
Razorpay PaymentsIndia

Payment Processing & Subscription Billing

Certifications: PCI-DSS Level 1 Compliant
Resend / AWS SESIndia & US

Transactional Email & Two-Factor OTP Delivery

Certifications: SOC 2 Type II, GDPR Compliant

Service Uptime & Incident Response

Our reliability and rapid mitigation commitments

99.9% Uptime CommitmentFinancial SLA backed for Enterprise tiers
P1 Critical Incident Response

Dedicated incident command team deployed with initial stakeholder updates within under 60 minutes.

Continuous Vulnerability Scanning

Automated CI/CD dependency audits and regular third-party penetration testing.

Vulnerability Disclosure Policy

Found a Security Issue?

We welcome reports from independent researchers. If you discover a potential vulnerability, please email our security team. We acknowledge all reports within 24 hours.

security@omniaos.in

Trust & Security FAQs

Clear answers regarding data ownership, privacy, and infrastructure security.

All primary database records and file attachments are stored in secure AWS Asia-South1 data centers located in Mumbai, India. We maintain strict local data residency aligned with the Indian DPDP Act 2023.

Secure your business on a trusted operating system.

Experience enterprise-grade security and zero lock-in. Start your 14-day free trial today.