Back to Home

Security Policy

1. Data Protection & Encryption

Bharat Hearth Go is committed to ensuring the security and integrity of your personal and medical information. We employ industry-standard security measures:

  • In Transit: All data transmitted between your device, our servers, and third-party APIs is encrypted using Transport Layer Security (TLS 1.2 or higher).
  • At Rest: Sensitive data, including passwords and medical identifiers, are stored using advanced cryptographic hashing and AES-256 encryption within our secure databases.

2. Network Security Infrastructure

Our server infrastructure is fortified with enterprise-grade firewalls, Distributed Denial of Service (DDoS) mitigation systems, and continuous Intrusion Detection/Prevention Systems (IDS/IPS). We actively monitor our network traffic for any suspicious or malicious anomalies 24/7/365.

3. Payment Security & PCI-DSS Compliance

We prioritize the safety of your financial data. Bharat Hearth Go does not store your complete credit card or banking information on our servers. All digital payments are processed through heavily audited, Level 1 PCI-DSS compliant third-party payment gateways (e.g., Stripe, Razorpay) utilizing secure tokenization.

4. Internal Access Controls & Authentication

We adhere to the principle of least privilege regarding data access:

  • Access to user and medical data is strictly limited to authorized personnel who require it to perform specific, approved job functions.
  • All staff accounts require Multi-Factor Authentication (MFA) and utilize secure VPNs for administrative access.
  • All administrative actions and data access events are logged and routinely audited for compliance.

5. Vulnerability Management

We maintain a proactive approach to security through continuous vulnerability scanning and periodic penetration testing performed by independent cybersecurity firms. Any identified vulnerabilities are prioritized and patched immediately based on their severity.

6. Incident Response & Breach Notification

In the highly unlikely event of a data breach or security incident, Bharat Hearth Go has a comprehensive incident response protocol. We will immediately work to contain the threat and, in accordance with applicable laws, notify affected users, healthcare partners, and regulatory authorities without undue delay.