Security Built Into Every Connection
Security, privacy, and reliability—engineered into the DigiKhet platform by design.
DigiKhet protects data across its full lifecycle, from field devices to the cloud, with security controls designed around data protection, secure access, and reliable operations.
DPDP Act, 2023 Aligned
Protection at Every Layer of DigiKhet
Multiple layers of security work together to protect data across the DigiKhet ecosystem.
DPDP Act, 2023 Aligned
Technical and organisational measures follow the data-protection principles of the DPDP Act, 2023.
End-to-End Encryption
Data is encrypted at the device, protected in transit using TLS 1.2, and encrypted at rest.
AWS Infrastructure
DigiKhet runs on Amazon Web Services, with application data stored within AWS Regions in India.
Least-Privilege Access
Role-based permissions restrict access to production systems and sensitive data.
Defence in Depth
Overlapping safeguards operate across the network, application, and data layers.
Resilient by Design
Encrypted backups, disaster recovery, and high-availability architecture support reliable operations.
How DigiKhet Protects Data — End to End
Security follows data throughout its journey—from the field device to the cloud and through controlled access.
Field Device
DigiKhet devices capture GPS, sensor, and telemetry data, with data encrypted at the source before transmission.
In Transit
Communication between the mobile app, web portal, backend APIs, and cloud is protected using SSL/TLS with TLS 1.2.
At Rest
Application data stored in the cloud is protected through database encryption, with backups secured through encryption.
In Use
Role-based, least-privilege access governs data processing and access to production systems.
Defence in Depth
No single security control is relied upon. Overlapping safeguards across the network, application, and data layers help contain gaps in individual layers.
Built Around Data Protection Principles
DigiKhet is developed in accordance with the principles of the Digital Personal Data Protection Act, 2023.
Data Minimisation
Only the data required to deliver intended services is collected.
Purpose Limitation
Data is processed solely for legitimate business purposes.
Access Protection
Personal and operational data is protected against unauthorised access.
Restricted Access
Sensitive information is restricted to authorised personnel only.
Safeguarded Storage
Appropriate safeguards are applied to data storage, processing, and management.
Ongoing Compliance
Security controls and operational practices are maintained to support compliance.
A Secure AWS Foundation
DigiKhet is hosted on Amazon Web Services, following AWS security practices for security, availability, and reliability.
Network Protection
Amazon VPC
Secure network isolation for cloud resources.
Security Groups & NACLs
Restrict traffic to authorised connections.
AWS WAF
Helps protect against common attacks such as SQL injection and XSS.
Access & Secure Communication
IAM
Provides least-privilege access to AWS resources.
ACM
Manages SSL/TLS certificates for HTTPS.
Content Security Policy
Limits web content to trusted sources.
Monitoring & Resilience
Monitoring & Logging
Continuous monitoring and centralised logs.
Backup & Disaster Recovery
Regular encrypted backups and recovery measures.
High Availability
Resilient architecture designed to support uninterrupted service.
Data Residency — India
Application data is stored within AWS Regions in India.
Controlled Access. Protected Data.
Security controls help protect DigiKhet systems, operational data, and customer information throughout day-to-day operations.
Access Control & Operational Security
- Production access is limited to authorised personnel based on business responsibility.
- Administrative access is managed through secure authentication and controlled permissions.
- Security logs are maintained for monitoring, auditing, and incident investigation.
Data Integrity & Confidentiality
- Sensitive information is protected against unauthorised access.
- Data is protected during transmission and storage.
- Operational data is maintained for accuracy and consistency.
- Secure processing is applied to IoT and application data.
Security Is Part of How DigiKhet Is Built
DigiKhet combines encrypted device communication, SSL/TLS-protected interfaces, encrypted database storage, controlled access, and a secure AWS foundation to protect customer information while supporting the principles of the DPDP Act, 2023.
Security at Every Stage