Trust & Compliance
Security and compliance, built in — not bolted on.
CasePrimus.ai handles litigation and court-case data for global companies and their Indian relationships. Here's exactly where that data lives, who touches it, and what's certified — not a generic trust-page template.
Certifications
Independently certified information security and quality management
ISO/IEC 27001:2022
Information Security Management
Certifies our information security management system (ISMS) covering the digital onboarding, eKYC automation, and integration platform CasePrimus.ai is built on.
SP Certification Ltd. (UK) (Accredited by AFIST)
Certificate SPC22I7264/S1
Valid until 8 September 2027
ISO 9001:2015
Quality Management System
Certifies the quality management system covering our software solutions for onboarding, eKYC automation, and integration services.
QFS Management Systems LLP (Accredited by Standards Council of Canada)
Certificate SCC/2509PQ/2943
Valid until 11 September 2028
GDPR
Self-declared
Data handling practices align with the EU General Data Protection Regulation's principles for lawful processing, data minimization, and data subject rights.
DPDPA
Self-declared
Data handling practices align with India's Digital Personal Data Protection Act, 2023, for the personal data we process.
ISO/IEC 27001:2022 and ISO 9001:2015 certifications are held by Pegadroid IQ Solutions Private Limited, the registered legal entity operating Attestr's products, including CasePrimus.ai. Certificate details available on request — see Contact below. GDPR and DPDPA have no accredited third-party certification scheme to be audited against, so those two are self-declared compliance commitments, not certifications.
Data hosting & security
Where your data lives, and how it's protected
India-resident hosting
Application and database infrastructure runs on AWS in ap-south-1 (Mumbai, India) — case and account data stays in-region by default.
Encrypted in transit
Every connection to CasePrimus.ai is served over HTTPS with HSTS enforced, so a downgrade to plain HTTP is rejected by the browser, not just discouraged.
Role-based access control
Admin and staff roles, per-user entity assignment, and account-level policy control who can see or export a given entity's data — see Enterprise Access Controls.
Human-verified data quality
Ambiguous or malformed case identifiers are routed to a specialist review queue instead of silently failing — see Human-Verified Data Quality.
Sub-processors
Every third party that touches your data, named
Hosting, database, billing, email, and AI-summarization providers are each named individually — what they receive, and where they're located. Court-record lookups run through licensed verification data partners bound by equivalent data-protection terms, with Indian data residency.
Legal & policies
The rest of the paperwork
Security disclosures, DPAs, and certificate copies: support@caseprimus.ai
Need this for a vendor security review?
Bring your security questionnaire or DPA — we'll walk through it directly rather than making you dig through this page.