QUAICU/Regulated teams
15 REGULATED TEAMS

Every change reviewed.
Every action recorded.
Priced per ticket.

For fintech, healthtech, edtech and insurtech teams, and any business that handles personal data. A person reviews each delivery, every action is recorded, and the work can run where your IT policy requires.

Talk to us How support works

Based in Hyderabad, India. For teams in Europe, the Middle East, the US and India.

EVERY ACTION RECORDED · HUMAN-APPROVED
15·1 WHAT YOUR RISK AND COMPLIANCE TEAM WILL ASK

Questions with
straight answers.

Who approves a change?
A named person reviews every delivery before it ships. Anything consequential is approved by a person.
Is there a record?
Every action is recorded end to end, and the record cannot be edited after the fact.
What does the AI do?
Our engine takes on the repeatable work and proposes. People decide. Rules are checked before the AI acts.
Where does our data run?
Anything we host for you can run on-premise, in a private cloud, hybrid, or on AWS, Azure or GCP, as your IT policy requires. Our AI model providers are listed on our Trust page, and are used under business agreements that do not allow training on your content.
Is our data kept apart from other clients'?
Yes. Data is kept separate for each client.
How does this relate to data protection law?
Consent handling, an audit trail and human approval are part of how we work, built to support DPDP Act and GDPR obligations. Your legal adviser decides what applies to you.
RECORDED END TO END · REVIEWED BY A PERSON
15·2 DATES WORTH KNOWING

India's DPDP Rules
are phasing in.

Engineering work these duties can involve: knowing where personal data is stored and who can reach it, building consent and notice into your product, detecting and reporting breaches, and handling correction and erasure requests.

November 2025
The Digital Personal Data Protection Rules, 2025 were notified.
From November 2026
Consent Manager registration and obligations begin.
From May 2027
Core duties for businesses that handle personal data begin: notice, security safeguards, breach intimation and the rights of individuals.

Dates are taken from public summaries of the DPDP Rules, 2025 (for example EY and Hogan Lovells) and were last reviewed in October 2026. A proposal to bring the main duties forward was discussed in January 2026, so check the current dates. This is engineering context, not legal advice; check them with your legal adviser.

Talk to us See pricing How we keep work checked