What being registered with CERT-In means for our customers
29 October 2026 · 4 min read
We gave CERT-In a point of contact on 27 October 2026. What that commits us to: incident reports within 6 hours, 180-day logs and synced clocks.
CERT-In is India's national computer emergency response team. Its 2022 directions apply to any company that runs systems in India or serves Indian users, and they start with a simple requirement: give CERT-In a named point of contact. We sent ours on 27 October 2026 for Aapastech Private Limited and 14818032 Canada Inc.
What the directions ask
- Report certain cyber incidents to CERT-In within 6 hours of noticing them.
- Keep logs of our systems for 180 days, in India, and hand them over when CERT-In asks.
- Sync every system clock to a trusted time source, so logs from different systems line up.
- Answer CERT-In's requests through the named contact.
Where we are
Our Google Cloud systems already keep logs for 180 days. We have prepared storage for Cloudflare logs and are switching on the remaining log feeds, with 31 December 2026 as our deadline. The incident runbook that covers the 6-hour report is written.
Why customers should care
If something goes wrong, a company with a named contact, kept logs and a rehearsed process can find out what happened and fix it. That protects the businesses that run on Tyashin, Thridify and YOM, and their customers. See the current status on our trust page.