IT Act Compliance & Cyber Security Policy

ANUDIPTI FUTURE FOUNDATION operates digital portals for public donations, membership database management, and cloud certificate generation. We are committed to maintaining robust "Reasonable Security Practices and Procedures" in strict adherence to Section 43A of the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

Our technical architecture incorporates high-standard cryptographic safeguards:

• Transport Layer Security (TLS 1.3): End-to-end encryption for all web sessions, ensuring payment details and passwords cannot be intercepted.
• Cryptographic Password Hashing: All admin and user credentials are encrypted using industry-standard salted hashing algorithms (Bcrypt/Argon2).
• Secure QR Verification: Issued certificates and member IDs utilize cryptographic hash signatures to prevent unauthorized duplication or digital tampering.

We enforce strict organizational controls to prevent unauthorized access:

• Two-Factor Authentication (2FA) for database and server administration.
• Automated access logging of all administrative actions with timestamp, IP address, and user identifier.
• Periodic automated daily database backups with encrypted offsite archiving.
• Quarterly vulnerability assessment and patch management for all server software dependencies.

In compliance with Rule 5(9) of the IT Rules 2011, any technical security concerns, unauthorized access attempts, or data vulnerabilities may be immediately reported to our designated IT Grievance Officer at info.anudipti@gmail.com with full technical headers for rapid containment within 24 hours.