Cloud security startswith the contract,not the console.

It describes which security controls the cloud provider handles and which remain your responsibility. It varies by service type, IaaS, PaaS or SaaS, and by provider.

We map it against your specific configuration so nothing falls through unnoticed.

Often yes, subject to the DPDP Act's cross-border transfer provisions and any sector-specific restrictions that may apply to your data.

We review your specific situation before you commit to a region.

Data ownership and portability on exit, liability caps relative to your actual risk, audit rights, and sub-processor disclosure are the areas most often overlooked.

We review the full agreement, not just the headline terms.

It depends on the cause and your respective contractual obligations. Provider agreements typically limit their liability significantly, which is why your own contracts with customers need to be realistic about this risk.

We help you understand and manage this exposure.

Yes, and it is often where the most contract inconsistency arises, since each provider's terms differ.

We align terms across providers so your obligations are consistent.

Agreement reviews are available as a fixed fee based on the number of providers and agreements involved.

Fees are agreed in writing before work starts.