Security Policy

How Fonada protects customer data — and how to reach our security team.

Certified security posture

Fonada is SOC 2 Type II and ISO 27001 certified, and holds an EcoVadis Gold sustainability rating. Enterprise-grade security is aligned with India's DPDP Act 2023.

Encryption & access control

TLS 1.3 for data in transit and encrypted storage for data at rest. Role-based access control (RBAC), single sign-on (SSO) and multi-factor authentication (MFA) support.

Compliance documentation

Comprehensive audit logs, configurable data retention and automatic deletion policies. Security documentation is available to enterprise customers on request.

Reporting a vulnerability

If you believe you have found a security vulnerability in any Fonada system, please report it to us:

security@fonada.com

We ask that you give us a reasonable time to address reports before any public disclosure. Thank you for helping keep Fonada and its customers safe.

See also our Privacy Policy and Terms & Conditions. A machine-readable version is available at /.well-known/security.txt.