Show the work behind your trust claims.
The Avisha Trust Seal is a digital mark for SaaS vendors, fintechs, healthtech and edtech companies that complete a defined Avisha Global assessment in privacy, security, AI governance or DPDP readiness. It is not a government or statutory certification — it is evidence that an assessment happened, what it covered and when.
TRUST SEAL Assessed · 2026
A signal backed by an actual assessment.
Anyone can write “bank-grade security” on a landing page. The Trust Seal exists so an organisation can show the work: a defined methodology, a named track, a dated assessment and a report a prospect or auditor can read.
- Each seal names its track and assessment month — never a vague “certified”
- Issued only after required findings are closed and verified
- Backed by a report you can share with enterprise buyers under NDA
- Time-bound, with re-assessment to retain it
Companies that sell into regulated buyers and keep losing weeks to the trust question.
SaaS vendors selling to enterprises. Fintechs onboarding with banks and NBFCs. Healthtech platforms handling patient records. Edtech products used by schools and universities. In each case the buyer’s procurement, security or compliance team has to be satisfied before the deal moves — and a paragraph of assurances does not satisfy them.
Sound familiar?
- Every enterprise deal stalls at the security and privacy questionnaire.
- Procurement asks “are you DPDP-ready?” and your answer is prose, not evidence.
- You have done the privacy work but have no way to show it on your website or in an RFP.
- Competitors claim “bank-grade security” with nothing behind it, and you cannot distinguish yourself.
- Buyers ask about governance of your AI features; you have a policy but no assessment.
- The board wants an independent view of your posture before the next launch or raise.
Four assessment tracks, each with a defined scope.
A seal is issued per track. Organisations often start with one and add others as buyers ask.
Privacy Ready
Privacy notices, data inventory, retention and data principal request handling assessed against our privacy checklist.
- Notice matches actual processing
- Inventory and retention schedule exist and are followed
- Request workflow tested end to end
Security Assessed
Security controls reviewed through VAPT of in-scope applications and infrastructure plus a configuration assessment.
- Penetration test with retest
- Cloud and access configuration review
- Critical and high findings closed
AI Governance Ready
AI system inventory, ownership, human oversight and policy practices reviewed for completeness and evidence.
- Every model and agent registered with an owner
- Acceptable-use and oversight policies in force
- Monitoring and change-control evidence
DPDP Readiness
Readiness posture for Digital Personal Data Protection Act obligations, evaluated against our DPDP assessment checklist.
- Consent and notice practices
- Data fiduciary duties and processor contracts
- Breach-response readiness
Each track is an Avisha Global assessment. None is a statutory, government or accredited certification, and DPDP Readiness is not a legal determination of compliance.
Selling to banks or hospitals usually means Security Assessed and DPDP Readiness in the same breath. Pricing is fixed per track once scope is agreed, so the useful next step is scoping one — not committing to all four.
Scope and price one trackAssess, remediate, display. Typically 4–8 weeks per track.
Week 1 · Scope
Track selected, systems and products in scope agreed, evidence requests issued.
Week 2–4 · Assess
Document review, interviews, and testing where the track requires it. Findings classed as required or advisory.
Week 4–7 · Remediate
You close required findings; we verify each one. Advisory findings go into a roadmap.
Week 8 · Display
Seal issued with its badge kit, supporting report and a stated validity period.
A seal is dated for a reason.
Privacy, security and AI posture drift. A seal issued in March says nothing about a product rewritten in September. So every seal carries its assessment month and a 12-month validity period, after which re-assessment is required to retain it.
- Valid for 12 months from the assessment date; re-assessment is lighter when posture has been maintained
- Material change — new product, new data categories, new AI features — triggers early review
- Web badge, procurement summary and RFP language supplied in the badge kit
- Supporting report shareable with prospects and auditors under NDA
- Misuse, misrepresentation or an unaddressed critical finding leads to withdrawal
What changes in the sales cycle.
Claiming trust
- “We take security seriously” on the website
- Security questionnaire answered from memory each time
- No dated evidence for privacy or AI governance
- Deal stalls while the buyer’s compliance team investigates
Showing trust with the Avisha Trust Seal
- A named track and assessment month on the badge
- One report that pre-answers the questionnaire
- Findings closed and verified before the seal is issued
- Honest scope: the seal says what it is, and what it is not
Six things in the seal package.
Scope statement
Track, products, systems and data categories covered — the exact boundary of the seal.
Assessment report
Findings classed as required or advisory, with evidence and remediation guidance.
Verification record
Dated confirmation that each required finding was closed and retested.
Badge kit
Web badge, brand guidance and the wording you may and may not use alongside it.
Procurement summary
A two-page summary for RFPs and vendor-onboarding teams.
Re-assessment plan
Validity date, what to maintain, and what triggers early review.
Assessed by the team that does the work, not a self-attestation form.
Real testing behind the badge
Security Assessed means our testers ran a penetration test and retest. Privacy Ready means we exercised the request workflow. The seal is the output of the same services we deliver to regulated enterprises.
Built for the Indian regulatory context
Checklists reflect DPDP obligations and what RBI- and SEBI-supervised buyers ask of their vendors, so the report answers the questions Indian procurement teams actually raise.
Honest scope, stated plainly
Every seal names its track and date and says what it is not: not a government, statutory or accredited certification. That candour is what makes buyers take it seriously.
There is probably an enterprise deal of yours sitting in a security questionnaire right now. Send us that questionnaire. We will tell you which track answers it, what you would have to close first, and whether a seal would have moved the deal at all.
Send us the questionnaireFrequently asked questions
Ready to show the work?
Pick the track your buyers ask about most. We will scope it, price it and tell you what closing it will take.