Enterprise-Grade Security: Your Data, Our Priority
Built with enterprise security and compliance at its core, Sales Centri meets the most stringent industry standards. We are aligned with India's DPDP Act, GDPR, and CCPA/CPRA, alongside SOC 2 Type II controls — so your data stays protected while you focus on growth.
Security Certifications & Compliance
We maintain the highest security standards with industry-recognized certifications and compliance frameworks.
DPDP Compliant
CompliantAligned with India's Digital Personal Data Protection Act, 2023 for digital personal data
SOC 2 Type II
CertifiedIndependently audited security controls for data protection
ISO 27001
CertifiedInternational standard for information security management
GDPR Compliant
CompliantFull compliance with European data protection regulations
CCPA / CPRA Compliant
CompliantCalifornia Consumer Privacy Act and California Privacy Rights Act alignment
HIPAA Ready
ReadyHealthcare data security and privacy standards
PCI DSS
CompliantPayment card industry data security standards
Sales Centri & India's DPDP Act
The Digital Personal Data Protection Act, 2023 (DPDP) is India's privacy law for digital personal data. Sales Centri aligns with it through purpose-limited processing, clear notices, consent where required, strong security safeguards, and support for access, correction, and deletion requests — alongside GDPR and CPRA.
How DPDP compares with GDPR and CPRA
DPDP
IndiaDigital Personal Data Protection Act, 2023
Consent- and accountability-focused rules for data fiduciaries handling digital personal data of people in India (data principals).
- Applies in India, and outside India when offering goods or services to people in India
- Consent-centric model, with limited "legitimate uses" where consent may not be required
- Rights to access, correct, update, erase data, and seek grievance redressal
- Enforced by the Data Protection Board of India, with significant monetary penalties
GDPR
European Union / EEAGeneral Data Protection Regulation
The EU's comprehensive privacy regulation and the global benchmark for data protection. It requires a lawful basis for every processing activity and gives individuals extensive control over their personal data.
- Applies to organizations processing personal data of people in the EU/EEA, including many companies outside Europe
- Multiple lawful bases (consent, contract, legitimate interests, legal obligation, and more)
- Broad individual rights including access, rectification, erasure, portability, restriction, and objection
- Fines can reach the higher of €20 million or 4% of global annual turnover
CPRA
California, USACalifornia Privacy Rights Act (builds on CCPA)
California's consumer privacy law (CPRA amends and strengthens the CCPA). It focuses on transparency, consumer choice, and limits on the sale or sharing of personal information — often abbreviated alongside CCPA as California's privacy framework.
- Applies to for-profit businesses that meet California revenue or data-volume thresholds
- Primarily a notice-and-opt-out model for sale/sharing of personal information
- Rights to know, delete, correct, and opt out of sale/sharing; stronger rules for sensitive personal information
- Enforced by the California Privacy Protection Agency and Attorney General; limited private right of action for certain breaches
DPDP vs GDPR vs CPRA — Key Differences
CPRA is California's Privacy Rights Act (often discussed with CCPA). Below is a practical side-by-side of how these three frameworks differ.
| Aspect | DPDP (India) | GDPR (EU) | CPRA (California) |
|---|---|---|---|
| Geographic focus | India and services offered to people in India | EU/EEA residents (broad extraterritorial reach) | California residents (threshold-based businesses) |
| Core model | Consent-first, plus defined legitimate uses | Multiple lawful bases (rights-based) | Notice + opt-out (consumer choice) |
| Who it protects | Data principals (individuals) | Data subjects | Consumers (California residents) |
| Organization role | Data fiduciary / data processor | Controller / processor | Business / service provider |
| Key individual rights | Access, correction, erasure, grievance, nominate | Access, portability, erase, restrict, object, and more | Know, delete, correct, opt out of sale/sharing |
| Enforcement | Data Protection Board of India | EU Data Protection Authorities | CPPA + California Attorney General |
Sales Centri designs product and data practices to support compliance across these regimes for customers operating in India, Europe, and the United States.
DPA-ready processor controls, assurance pack, and clear answers for legal & security.
Advanced Security Features
Multi-layered security architecture protecting your data at every level.
End-to-End Encryption
All data encrypted in transit and at rest using AES-256 encryption
Multi-Factor Authentication
Mandatory MFA for all user accounts with support for SAML/SSO
Data Residency Control
Choose where your data is stored with regional data centers
Audit Logging
Comprehensive audit trails for all system activities and access
Regular Security Scans
Continuous vulnerability assessments and penetration testing
24/7 Security Monitoring
Round-the-clock security operations center monitoring
Privacy by Design
Our commitment to privacy goes beyond compliance - it's built into everything we do.
Data Minimization
We collect only the data necessary for providing our services
Transparency
Clear disclosure of what data we collect and how it's used
User Control
You maintain full control over your data and can export or delete it anytime
Purpose Limitation
Data is used only for the specific purposes for which it was collected
Your Data Protection Rights
We respect your data rights and provide full control over your information.
Security Incident Response
Immediate Detection
24/7 monitoring systems detect and alert within minutes
Rapid Response
Security team responds and contains threat within 1 hour
Transparent Communication
Affected customers notified within 72 hours as required
Trust Documentation
Download our security and compliance documentation for your review.
Security Whitepaper
Comprehensive overview of our security architecture
SOC 2 Type II Report
Independent audit of our security controls
Privacy Policy
How we collect, use, and protect your data
Terms of Service
Legal terms governing use of our services
Data Processing Agreement
DPDP- and GDPR-aligned DPA for enterprise customers
Incident Response Plan
Our procedures for handling security incidents
Ready for Enterprise-Grade Security?
Start with confidence knowing your data is protected by industry-leading security controls.