Question 1

Is Valueye certified to ISO 27001 or audited against SOC 2?

Accepted Answer

Valueye does not represent a certification, attestation, audit result, or report as current unless it can provide the applicable evidence and scope. ISO/IEC 27001 and SOC 2 may be used as useful control and assurance references when a customer engagement requires them.

Question 2

Can Valueye support DPDP Act and GDPR obligations?

Accepted Answer

Valueye can design product, data, identity, retention, consent, and operational controls to support obligations identified for an engagement. The customer and its advisers remain responsible for determining applicable law, roles, lawful grounds, notices, and final compliance requirements.

Question 3

How does Valueye support regulated BFSI teams?

Accepted Answer

For relevant BFSI systems, Valueye can engineer role-based access, maker-checker workflows, audit trails, consent evidence, environment segregation, monitoring, resilience, vendor-risk inputs, and exit considerations. Final regulatory applicability and approval remain with the regulated entity.

Question 4

Who owns compliance responsibility?

Accepted Answer

Responsibility is shared and documented. Valueye is responsible for the controls and services assigned to it under the engagement; customers retain responsibility for their business processes, data-controller or data-fiduciary decisions, user administration, legal interpretation, and regulatory obligations unless an agreement expressly says otherwise.

Question 5

How are third parties and subprocessors handled?

Accepted Answer

Relevant providers should be identified, assessed, contractually governed, granted only necessary access, and monitored in proportion to risk. Provider selection, data location, exit needs, and customer approval requirements are established for the engagement.

Question 6

Can a customer request security and compliance evidence?

Accepted Answer

Yes. Subject to confidentiality, contractual scope, and the sensitivity of the material, customers can request relevant policies, architecture information, control ownership, testing scope, recovery information, and other available evidence through Valueye's review process.

Data Privacy, BFSI & Software Compliance | Valueye