Trust & Security
Last updated · July 2026
We protect your data the way we curate a stay — with care, and without overstating what we've done. This page says plainly what is true today.
A recognised, registered company
Comfort Curators Private Limited is a private limited company registered in India (CIN U47912HR2026PTC144195) and a startup recognised by the Government of India's Department for Promotion of Industry and Internal Trade (DPIIT Recognition No. DIPP260899). Both are independently verifiable on the public MCA and Startup India registries.
Honest about certifications
We are building toward ISO/IEC 27001 as our baseline certification and hold ourselves to that standard. We do not display certification badges we have not earned. Our infrastructure providers are independently certified; those certifications are theirs until we complete our own audit.
Built on certified infrastructure
comfortcurator.com runs on providers that publicly report ISO 27001 and SOC 2 for our content delivery and edge, application hosting and managed database, and transactional email. Each one is named, with what it processes, on our sub-processors page — their certifications and data-processing terms sit behind our own, and we do not present a provider's certification as a credential of ours.
How we protect data
Our security practices include:
- Encryption in transit (HTTPS/TLS) across the site and API, and encryption at rest in our database.
- Least-privilege access with multi-factor authentication for our team.
- Admin functions protected by a separate authentication path, isolated from ordinary accounts.
- Secrets held only in encrypted platform stores, never in our source code.
- Consent-gated analytics: non-essential cookies load only after you accept them.
Reporting a security issue
If you believe you've found a security vulnerability, please email security@comfortcurators.in with details and steps to reproduce. We will acknowledge within 48 hours. Please do not attempt to access other people's data or disrupt the service.
Data protection & DPA
For how we handle personal data under the EU GDPR and India's DPDP Act, see our Data Protection page and Privacy Policy. A Data Processing Agreement and our list of sub-processors are available to business partners on request at privacy@comfortcurators.in.