Trust & security

Mapnyx is a product of TechUltra Solutions Pvt. Ltd., which is the contracting party, the data controller for this website, and the processor for venue data. Registered address and company number are not yet published here.

This marketing site is served by Vercel from its Mumbai region. The venue product is hosted separately; ask for its architecture during a security review.

No analytics, advertising or session-recording scripts run on this website. The only third-party requests a visitor's browser makes are to load this page itself. We would rather lose the funnel data than ask you to accept trackers before you have bought anything.

Website: Vercel for hosting, Resend for the contact form. Product: Cloudflare for object storage and CDN delivery of published venue packages, and MapTiler with OpenStreetMap for basemap tiles. A formal list with change notifications and the full product-side chain is still being assembled.

The venue analytics record each visit to a published venue: a pseudonymous visitor identifier, session count, the places viewed and searched, routes requested, device and browser, and an approximate location derived from IP at city level. This is visitor-level, not aggregated. If that matters for your deployment, raise it early — retention and aggregation are configurable and we would rather set them with you than default them.

The controller is an Indian entity, so EU customers need a transfer mechanism. Standard contractual clauses, the data processing agreement and the lawful bases are being prepared; we will state the hosting region explicitly rather than let you assume it.

The Digital Personal Data Protection Act applies to the operating entity alongside GDPR for EU customers. Notice and consent flows are being written, and the Act requires a named grievance officer — that name is not published yet.

The website is served from Mumbai. Per-plan residency options and region pinning for enterprise deployments are not yet defined, and we will not claim them until they are.

Contrast was measured across the whole palette in October 2026: body text 16.2:1, secondary text 7.0:1 and the locator orange 5.9:1 against the page background, all past AA, and every text style below the threshold was corrected. Keyboard-only navigation and a screen-reader pass have not been done, and no independent audit has been commissioned. We sell accessible wayfinding, so our own conformance is part of the product.

Asset tracking is the default. Any people-location feature is opt-in and governed by the venue's own workplace policy. We do not sell location data to anyone, in any form.

No SOC 2 audit has begun and no date is set. When one does, the type, the report date and how to request it under NDA will be stated here. If SOC 2 is a hard requirement for your procurement, we are not the right supplier yet, and it is cheaper for both of us to know that now.

There is no published security address or disclosure policy yet. Until there is, send anything you find through the contact form and it reaches an engineer rather than a queue. This is the gap on this page we are least comfortable with.