How we work responsibly
CloudStepIn Technologies Private Limited is incorporated in India under the Companies Act, 2013. These statements summarise the policies that govern how we work with our directors, employees, contractors, vendors, partners and clients.
Directors and company governance
Board and statutory compliance
The company complies with the Companies Act, 2013 and related rules.
- Board meetings held and minuted as required
- Statutory registers and records maintained
- Annual filings with the Registrar of Companies
- Director KYC and appointment disclosures kept current
Directors’ code of conduct
Directors act with integrity and in the best interests of the company and its stakeholders.
- Disclosure of interest in contracts and arrangements
- Related party transactions approved as the Act requires
- Confidentiality of board information
- Avoidance of conflicts of interest
Employees and employer commitments
Code of conduct
Integrity, respect, confidentiality and professional behaviour expected of everyone who works for or with CloudStepIn.
Prevention of sexual harassment
A POSH policy under the Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act, 2013, with an Internal Committee, awareness and time bound redressal.
Equal opportunity
Recruitment, development and reward based on merit, without discrimination on any protected ground.
Wages, social security and working conditions
Employment practices aligned with the Labour Codes in force from 21 November 2025 and applicable Telangana state rules, including provident fund, insurance, gratuity, maternity benefit and leave entitlements as applicable.
Working hours and leave
Working hours, overtime, holidays and leave managed in line with applicable law and written company policy.
Whistleblower and grievance channel
Employees and partners can raise concerns in confidence to leadership without fear of retaliation.
Contractors, consultants and associates
Engagement terms
Every contractor and consultant is engaged under a written agreement covering scope, fees, confidentiality and intellectual property.
- Non disclosure and confidentiality obligations
- Assignment of work product to the client or company as agreed
- Background and reference verification for client facing roles
- Compliance with client security and conduct requirements
Access and security
Contractors receive only the access their role requires, for only as long as it is needed.
- Need to know, least privilege access
- Multifactor authentication on company systems
- Prompt removal of access at engagement end
- Security awareness for all client engagements
Vendors and partners
Supplier code of conduct
We expect vendors and partners to act lawfully, ethically and with respect for people and the environment.
Anti bribery and corruption
Zero tolerance for bribery, kickbacks and facilitation payments, consistent with the Prevention of Corruption Act, 1988 as amended.
Conflicts of interest
Relationships that could influence decisions are declared and managed transparently.
Data processing terms
Vendors handling personal or client data sign data processing and confidentiality terms aligned with our obligations.
White label and partner delivery
Partner engagements follow agreed governance, branding, confidentiality and non solicitation terms.
Fair commercial practice
Transparent pricing, timely payment and fair dispute resolution with every supplier.
Data protection and information security
Personal data protection
Personal data is processed lawfully under the Digital Personal Data Protection Act, 2023 and its Rules, with consent, purpose limitation and security safeguards.
- Notice and consent for website and recruitment data
- Rights to access, correction and erasure honoured
- Breach response procedures in place
- Privacy Policy published on this website
Information security
Client and company information is protected by documented controls aligned with recognised good practice.
- Confidentiality agreements for all staff
- Access control and multifactor authentication
- Secure handling of client credentials and data
- Incident reporting in line with CERT In directions
Quality and responsible technology
Quality and service management
Delivery follows ITIL 4 practices, documented procedures, agreed service levels and continual improvement in every engagement.
Responsible use of AI
AI is applied with human oversight, within client data boundaries, and client data is never used to train public models.
Questions about our policies?
Contact us and the relevant member of our team will respond.
