C
Trust Centre
it services

Nimbus Software Pvt Ltd

How Nimbus Software Pvt Ltd protects your data

We run a documented management system with independent internal audits, tracked corrective actions and evidence for every control.

Programme readiness
Developing
48%
ISO 27001
Developing · 50%
SOC 2
Developing · 48%
ISO 9001
Developing · 50%
DPDP/GDPR
Developing · 45%

Readiness = implemented controls (full weight) + partially implemented (half) over applicable controls, updated live.

Frameworks we follow
ISO 27001
ISO/IEC 27001:2022
Information security management system (ISMS) with Annex A controls.
SOC 2
SOC 2 (Trust Services Criteria - Security)
AICPA Trust Services Criteria, Common Criteria CC1-CC9.
ISO 9001
ISO 9001:2015
Quality management system requirements, clauses 4-10.
DPDP/GDPR
India DPDP Act 2023 / GDPR
Personal data protection obligations for data fiduciaries / controllers.
Approved policies (5)
  • Incident Management Policy v1
    Reporting, classification, response and learning.
  • Information Security Policy v2
    Top-level commitment to protecting information assets.
  • Password and Authentication Standard v1
    Password complexity, MFA and credential handling.
  • Supplier and Third-Party Risk Policy v1
    Vendor due diligence and contracts.
  • Vulnerability and Patch Management Policy v1
    Remediation SLAs by severity.
Certifications & attestations
  • ISO/IEC 27001:2022 certificate
    TUV Demo Certification · IS 12345-DEMO · valid to 10 Oct 2027
Need the detailed documents?

Request access to audit reports, the full policy set and the Statement of Applicability.

Last updated 05 Sept 2026