Compliance.
How Aditi Consulting protects information, handles personal data, governs AI and measures delivery quality across every delivery center.
Security
Last Updated: August 12, 2026
Aditi operates a single information security program across India, the US and LATAM. The controls below form the global baseline every delivery center, employee and subcontractor must meet.
ISO/IEC 27001:2022 — Information Security Management System
Our ISMS is certified to ISO/IEC 27001:2022 and audited annually by an accredited third party. The certification scope covers client delivery, talent services and the corporate functions that support them.
Global Information Security Policy
The policy sets requirements for access control, encryption, endpoint protection, secure development and acceptable use. It is reviewed at least once a year and acknowledged by every employee during onboarding and annual training.
Incident Response & Breach Notification Standard
Security incidents are triaged by a central response team with defined severity levels and escalation paths. Affected clients are notified without undue delay and within the timelines set in their contracts or by applicable law.
Vendor & Subcontractor Security Requirements
Third parties with access to Aditi or client systems complete a security assessment before engagement and are bound by contractual controls equivalent to our own policy, including confidentiality, data handling and right-to-audit clauses.
Data Privacy
Last Updated: November 2025
One global Privacy Policy governs this website and all Aditi Services. It is not split by delivery center; where local law adds requirements, they are described on the regional pages linked below.
Privacy Policy
Explains what personal information we collect, why we use it, who we share it with and how long we keep it. Read the Privacy Policy (last updated November 2025).
Cookie Policy
We use first-party essential cookies and third-party cookies, such as analytics and advertising pixels. You can change your choices at any time from the Consent Preferences banner. Read the Cookie Policy (last updated December 2025).
Personal Information We Collect
Personal information categories collected (per CCPA categories A–K): identifiers; CA customer-records data; protected classifications; commercial info; biometric data; internet/network activity; geolocation; sensory data; employment info; education records; inferences.
Your Privacy Rights
State privacy rights extended to residents of: CA, CO, CT, DE, IN, IA, KY, MD, MN, MT, NE, NH, NJ, OR, RI, TN, TX, UT, VA — access, correction, deletion, opt-out of sale/sharing/targeted ads/profiling, limit use of sensitive PI.
No Sale of Personal Information
Honors Global Privacy Control (GPC) and Do Not Track (DNT) signals.
AI Governance
Last Updated: July 28, 2026
Aditi uses AI to accelerate delivery for clients and internal teams. These policies define how AI tools are approved, how data is handled when models are used or trained, and how risk is assessed before deployment.
Responsible AI Use Policy
Sets principles for transparency, human oversight, fairness and accountability. Client data is never entered into an AI tool unless the tool is approved and the client has authorized that use.
AI Training Guidelines
Covers data governance for model training and fine-tuning: data sourcing and consent, minimization, anonymization, retention and documentation of training datasets.
AI Risk Assessment Framework
Every AI use case is classified by risk before launch. Higher-risk cases require a documented impact assessment, security review and sign-off from the AI governance committee.
Approved AI Tools
A global registry lists the AI tools cleared for use, the data classifications each tool may process and the conditions of use. Regional availability is detailed on the pages below.
Quality Standards
Last Updated: June 3, 2026
Our quality program defines how engagements are planned, measured and improved, so clients receive consistent outcomes regardless of where their team is based.
Quality Management System
The QMS documents our delivery lifecycle, from engagement intake and resourcing through acceptance, review and closure, with defined owners and checkpoints at each stage.
Corporate Quality Policy & Objectives
Leadership sets measurable quality objectives each year, including client satisfaction, on-time delivery and defect leakage, and reviews progress quarterly.
Client SLA & KPI Reporting Standard
Service levels and KPIs are agreed at the start of each engagement and reported to clients on a fixed cadence, with commentary on any variance and the actions taken.
Corrective and Preventive Action (CAPA)
Nonconformities are logged, investigated for root cause and closed with corrective actions. Preventive actions are shared across teams so a lesson learned in one region benefits all of them.