Compliance & grievance

Where Evosyz acts as a technology service provider, business correspondent or franchise partner, we operate under the directions and contractual frameworks of the regulated entity we work with — typically a bank, NBFC or RBI-authorised White Label ATM Operator. Customer-facing financial services delivered through these arrangements remain regulated by, and the responsibility of, the underlying regulated entity.

We also align our information-handling practices with the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023, and applicable RBI guidelines on outsourcing of IT services and payment-system operations.

• HTTPS/TLS for all data in transit on our public properties.
• Access to production systems is restricted, logged and reviewed.
• Vendors and processors are selected with reference to security and data-protection posture, and bound by written agreements.
• We follow secure development practices and patch dependencies on a regular cadence.

For any partner, franchisee or counter-party relationship, Evosyz carries out reasonable due-diligence checks consistent with the KYC, AML and CFT requirements of the regulated entity sponsoring the arrangement. We will not proceed with relationships that cannot meet these requirements.

If you have a complaint about our website, our services or how we have handled your personal data, please raise it in writing first. We aim to acknowledge complaints within 2 working days and to resolve them within 30 days, in line with the DPDP Act timelines.

For complaints concerning a regulated financial service delivered through a partner bank, NBFC or WLA operator, you may also approach that regulated entity's grievance channel and, ultimately, the RBI Integrated Ombudsman Scheme.

This page describes our current practices. It is not a certification or audit report. Specific regulatory approvals, certifications and contractual terms are evidenced separately, on request, to counter-parties under a non-disclosure arrangement.