Trust and compliance
What we have done, and what is still in progress
We operate under Indian, European and Canadian law at the same time. This page lists each duty we have taken on and where it stands. We update it when something changes.
Your Aapastech company · Rest of world
14818032 Canada Inc.
14818032 Canada Inc. is the controller of your personal data. Your contract is governed by the laws of the Province of Ontario and the federal laws of Canada that apply there.
Grievance Officer
Done
Named officer for India under the IT Rules and SPDI Rules, with published response times.
CERT-In point of contact
Done
Point of contact submitted to CERT-In on 27 October 2026 for Aapastech Private Limited and 14818032 Canada Inc.
CERT-In 180-day logs
In progress
Google Cloud logs already kept for 180 days. Cloudflare log retention is being switched on, due by 31 December 2026.
AI chatbot disclosure
Done
The Tyashin chatbot tells visitors they are talking to an AI, as Article 50(1) of the EU AI Act requires.
AI image labelling
In progress
Tyashin for LinkedIn labels its AI images today. Tyashin and Thridify follow before 2 December 2026 (EU) and 31 December 2026 (India).
Content provenance (C2PA)
In progress
We keep the C2PA content credentials that image models attach, never strip them, and are working toward membership of the Content Authenticity Initiative.
DMCA designated agent
In progress
Registration of our designated agent with the US Copyright Office is under way. Copyright notices already reach us at the address on our copyright page.
Canadian privacy officer
Done
A named Privacy Officer for PIPEDA and Quebec.
Security disclosure
Done
Responsible disclosure pages are live on thridify.com and yom.aapastech.com.
Other regions
GDPR controller in the EU
Done
Aapastech OÜ in Tallinn is the controller for people in the EU and the UK, with privacy notices live on every product.
UK representative (Article 27)
In progress
Our UK GDPR representative is being appointed and will be named here.
DPDP Act readiness
In progress
Notices, consent records and Hindi versions of our policies are being prepared ahead of the Act’s core duties.
Grievance Officer
Complaints about content, data or our service, with response times.
Copyright and DMCA
How to report content that uses your work without permission.
Privacy
Your rights under India, EU and UK, Rest of world law.
These positions were set by our in-house team. Where a regulator or a court decides otherwise, we follow that decision and update this page.
A question about compliance?
Security teams and procurement reviewers can write to us directly.