Data Protection

How we safeguard your personal and employment data

Last updated: 26 March 2026

Contents

Our Commitment Data Controller Legal Basis for Processing Security Measures International Transfers Data Breach Notification Your Rights Contact the DPO

1. Our Commitment

AscentPassport is committed to the highest standards of data protection. We process personal data in accordance with the Information Technology (Amendment) Act 2008, the Digital Personal Data Protection Act 2023 (India), and applicable international standards including GDPR where relevant.

2. Data Controller

AscentPassport Technologies Pvt Ltd is the data controller for all personal data processed on the platform. Our Data Protection Officer can be reached at hello@ascentpassport.com.

3. Legal Basis for Processing

We process your data under the following legal bases:

Contract: Processing necessary to provide verification services you have requested.
Consent: National identity number collection (PAN/SSN/Passport) is consent-based. You may withdraw consent, subject to account closure.
Legitimate Interests: Fraud prevention, platform security and audit logging.
Legal Obligation: Compliance with applicable laws and court orders.

4. Security Measures

We implement the following technical and organisational measures:

AES-256 encryption for national identity numbers at rest
TLS 1.3 for all data in transit
Role-based access control (employees cannot see employer data and vice versa)
Immutable audit logs for all verification events
Regular penetration testing and security audits
Two-factor authentication for admin accounts

5. International Transfers

If you are located outside India, your data may be processed in India. We ensure adequate safeguards are in place including standard contractual clauses where required.

6. Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and the relevant regulatory authority within 72 hours of becoming aware of the breach.

7. Your Rights

Under the Digital Personal Data Protection Act 2023, you have the right to: access your data, correct inaccurate data, erasure (right to be forgotten), grievance redressal. Submit requests to hello@ascentpassport.com. We will respond within 30 days.

8. Contact the DPO

Data Protection Officer: hello@ascentpassport.com | AscentPassport Technologies Pvt Ltd | Ahmedabad, Gujarat 380015, India