Skip to content

Trust Center

Built so people
can trust their employer's tools.

Wellbeing software only works if people trust it. These are the commitments built into Umajani, for every plan.

Who sees what

Personal space

Mood, sleep, cycle, journal

Work space

Team rituals, shared checklists

Company dashboard

Anonymous trends, groups of 5+

Data stored in India

Customer data is hosted in Indian cloud regions. Enterprise contracts include data residency commitments.

Encrypted everywhere

TLS 1.2+ in transit and AES-256 at rest. Journal entries get an extra layer of encryption.

DPDP Act 2023 aligned

Consent, purpose limitation, data principal rights and breach notification built into how we operate.

Groups of five or more

Wellbeing data only appears on dashboards for groups of at least five people. Personal space never appears.

Export or delete anytime

Every user can export or delete their personal data from settings, without contacting support.

SSO and SCIM

SAML and OIDC single sign-on with Okta, Microsoft Entra ID and Google Workspace, plus SCIM provisioning.

Audit logs

Admin actions, exports and access to reports are logged and available to workspace owners.

Retention controls

Admins set how long checklists, proofs and reports are kept.

Certifications

Honest about where we are.

ISO 27001 and SOC 2 Type II are on our roadmap. We will list them here only once an independent auditor has certified us. Until then, our security questionnaire answers are available on request.

Wellness, not medical

Umajani offers wellness guidance and routine planning. It does not diagnose, treat or prevent any medical condition.