NoticeBulk data security
Summary of noticebulk data security: Borrower data is sensitive. This page is a draft for review by counsel and may be updated; the date of the latest version is 2026-11-08.
Our approach: noticebulk data security
Borrower data is sensitive. NoticeBulk data security rests on collecting only what is needed, limiting who can see it, and keeping a record of every sensitive action.
This page describes the safeguards in the platform and the steps we ask clients to take.
Access control: noticebulk data security
Clients see only their own orders. Advocates see only the orders assigned to them. Administrators have separate accounts.
Staff sign in with strong passwords and every sign-in is rate limited.
Client sign-in uses one-time secure links that expire in 15 minutes and work once.
Audit trail: noticebulk data security
Every payment, approval, edit, sealing and dispatch action is written to an audit log with the time and the person who did it. The log is part of the proof pack you can download.
This helps you show how a notice was prepared and served if it is ever questioned.
Technical safeguards: noticebulk data security
Traffic is served over HTTPS. Pages send strict security headers and a content security policy. Forms use anti-forgery tokens, inputs are validated on the server, and exports guard against spreadsheet formula injection.
Files you upload are limited in size and parsed as plain data, never executed.
Payments: noticebulk data security
Card and UPI details are handled by the payment gateway and never stored by NoticeBulk. We store only the payment status, amount and gateway reference.
We verify gateway signatures before marking an order paid.
Backups and retention: noticebulk data security
The database is backed up regularly. Recipient details are anonymised after the retention period described in the privacy policy, and you can ask for erasure from your portal.
Some records are kept longer where tax and legal rules require it.
What we ask of clients: noticebulk data security
Upload only data you are entitled to share. Do not share sign-in links. Tell us promptly if an email account is compromised or an employee leaves.
If you want an NDA or data processing agreement for a large batch, ask us before you upload.
Reporting a vulnerability: noticebulk data security
Email sglawindia@gmail.com with details. See the security.txt file on this site. We will acknowledge within 48 hours and fix confirmed issues promptly.
Please do not access other users' data while testing.
More about noticebulk data security
Questions? Email sglawindia@gmail.com or use the grievance process.
TermsPrivacyRefundsGrievance officerAboutData security