Trust Center
How Techseria protects your data — our approach to privacy, security, and data protection across every product we build. Certified to ISO/IEC 27001, 27017, 27018 and SOC 2 Type 2.
No commitment Fixed-fee Discovery Response within 4 hours
Independently certified
Techseria Private Limited is certified to four internationally recognised information security and privacy standards. They show that the way we build, host and support our products is held to independent standards for security management, cloud security, personal-data protection in the cloud, and operating controls tested over time.
- ISO/IEC 27001:2022 (information security management system). Certified by ICV Assessments Pvt. Ltd. Certificate IN/65428607/8724. Issued 31 October 2026. Valid until 30 October 2029. Surveillance reviews: 30 September 2027 and 30 September 2028.
- ISO/IEC 27017:2015 (information security controls for cloud services). Certificate IEC-TPLP-2026-1241. Issued 30 October 2026. Valid until 29 October 2029. Surveillance reviews: 29 October 2027 and 29 October 2028.
- ISO/IEC 27018:2025 (protection of personal data in public cloud services). Certificate IEC-TPLP-2026-1242. Issued 30 October 2026. Valid until 29 October 2029. Surveillance reviews: 29 October 2027 and 29 October 2028.
- SOC 2 Type 2 (independent audit of security controls operating over time, covering all five Trust Services Criteria). Certificate 26TEL1437. Issued 30 October 2026. Valid until 29 October 2029. Surveillance reviews: 29 October 2027 and 29 October 2028.
What this means for you
You can rely on documented, audited security management when you assess Techseria as a supplier. Access control, risk management, incident handling, supplier management, encryption and data protection practices are part of a management system that is reviewed by independent auditors every year, not a one-off questionnaire answer.
The certificates are held by Techseria Private Limited (CIN U72900GJ2011PTC066978), registered office G-1209, 12th Floor, Titanium City Center, Nr. Shyamal Cross Road, Satellite, Ahmedabad 380015, Gujarat, India. The company was incorporated in 2011 as Open Source Squad Consultancy Private Limited and has operated as Techseria Private Limited since May 2016. It develops and supports our products, including FacilityFlow. Our UK entity, Techseria (UK) Ltd, is not itself a certificate holder.
These certifications apply to Techseria Private Limited as a whole. They therefore apply to all of Techseria's current products (FacilityFlow, Mira, Techseria Roster, Taxio, ManuMind and Sutra) and services, and to future products and services that Techseria delivers within the certified scope.
Certified scope
All four certificates cover the same scope: Provision of Information Security Management System for Software Development, Web and Mobile Application Development, API Integration, ERP and Workflow Platform Implementation, Business Process Automation, Cloud Solution Design and Management, AI-based Solutions, Data Engineering, Migration, Processing, Reporting and Analytics, Engineering, Deployment, Maintenance and Support of Software Products.
The scope includes engineering, deployment, maintenance and support of software products. SOC 2 Type 2 covers all five trust service principles. The ISO/IEC 27001:2022 certificate was issued by ICV Assessments Pvt. Ltd. (Noida, India), and its authenticity can be verified at www.icvassessments.com. Each certificate is subject to completion of its surveillance audits by the due dates.
Our commitment
Techseria builds enterprise software and digital transformation services for customers in the UK, the EU, and India. We process personal data as part of delivering our products and services, and we take our obligations under the UK GDPR and EU GDPR seriously. This page explains how we approach data protection, where your data is hosted, who we work with, and how to reach us with questions or requests.
Who we are
Techseria operates through two group entities. Techseria (UK) Ltd (company number 13475256), registered at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Techseria Private Limited (CIN U72900GJ2011PTC066978), registered at G-1209, Titanium City Center, 100 Feet Shyamal Road, Satellite, Ahmedabad – 380015, Gujarat, India. For all privacy questions, data protection queries, or rights requests, contact us at [email protected].
Data hosting & security
We host our infrastructure and customer data on Microsoft Azure. Azure's data centres provide physical security, network protection, and infrastructure-level safeguards that we build on top of with our own access controls and operational practices. We retain personal data for as long as it is needed to provide our services, and generally for up to 7 years, after which it is deleted or anonymised unless a longer period is required by law or an active contract. We do not currently hold a formal ISO 27001 or equivalent security certification. We are happy to complete customer security questionnaires and share more detail about our technical and organisational measures on request — contact Our information security management is independently certified (ISO/IEC 27001, 27017, 27018 and SOC 2 Type 2).[email protected].
Subprocessors & third parties
We do not sell personal data, and we do not share it with third parties. Our infrastructure is hosted on Microsoft Azure, which secures and stores our systems and data as our infrastructure provider — Azure does not access, use, or share that data itself. Beyond hosting, we use a small number of analytics tools to understand how our website is used: Google Analytics and Google Tag Manager, LinkedIn Insight Tag, and Microsoft Clarity. A full list of processors, with international transfer details, is available on request — email [email protected].
Your rights
Under UK and EU GDPR, you have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent at any time. To exercise any of these rights, email [email protected] with details of your request. We will respond within one month, as required by law. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority — in the UK, the Information Commissioner's Office (ico.org.uk).
Available on request
For customers and prospective customers who need deeper documentation to complete their own due diligence, we can provide the following on request: our Data Processing Agreement, EU Standard Contractual Clauses and UK International Data Transfer Addendum, a summary of our technical and organisational measures, data flow and data residency information for a specific product, and responses to security questionnaires. To request any of these documents, email [email protected] with your company name and which document you need. We review and issue these individually rather than publishing them, since terms are often tailored per customer contract.
Our products
The commitments on this page apply across our product portfolio, including FacilityFlow, Mira, Docmet, and Sutra. Product-specific data flow and hosting details are available on request — email [email protected].
Contact us
Questions about this page, a data subject request, or a document request: [email protected]. This page was last reviewed in September 2026 and will be updated as our practices evolve.