OurTerms
& Commitments
Everything that governs how we work with you - written clearly, organized logically, and updated regularly. No legal language surprises.
⭐ Start Here
Master Terms of Service
The core document governing your full relationship with Exponent Solutions, including service delivery, payment terms, intellectual property, warranties, and dispute resolution.
📂 All Documents
Security Terms
Defines Exponent security obligations, client responsibilities, incident response timelines, access controls, and audit rights.
Compliance Terms
Covers frameworks like SOC 2, ISO 27001, GDPR, DPDPA, PCI DSS, and shared compliance obligations.
Privacy Policy
Explains how we collect, use, share, and protect personal data, including rights and retention periods.
Cookie Policy
Lists cookie and tracking technologies, why they are used, and how users can manage preferences.
Acceptable Use Policy
Defines permitted and prohibited service usage, restrictions, and enforcement actions for violations.
Service Level Agreement
Documents uptime, response and performance commitments, with service credit remedies for validated breaches.
Document Update History
All documents are reviewed quarterly by Legal and Compliance teams.
🏅 Active Certifications
We Back Our Words With Proof
Every commitment is verified by independent third-party auditors.
SOC 2 Type II
Security, Availability
✓ Certified 2024ISO 27001:2022
Information Security
✓ Certified 2024PCI DSS Level 1
Payment Card Standard
✓ Certified 2024GDPR & DPDPA
EU and India privacy
✓ CompliantHIPAA Ready
Healthcare controls
✓ BAA AvailableISO 9001
Quality management
✓ Certified 2023CERT-In
Cyber mandate
✓ CompliantIT Act 2000
Indian IT law
✓ Compliant❓ Common Questions
Which documents do I need to sign?
All clients accept the Master Terms of Service, Security Terms, and Compliance Terms. Depending on data type and region, a DPA may also be required.
How will I be notified of term changes?
Material changes are communicated by email at least 30 days in advance. Minor clarifications are reflected in version history.
Can I request negotiated terms?
Enterprise clients can request clause-level changes. Standard terms remain active until both parties sign an amendment.
How do I get your SOC 2 report?
Active clients may request SOC 2 reports via compliance@exponentsolutions.ai. NDA requirements apply before sharing.
Where is my data stored?
Default region is India. Additional residency regions are available based on service design and contractual setup.
What if Exponent breaches these terms?
Remedies depend on breach type and agreement terms, including incident protocol actions, credits, or termination rights.
Still Have Questions?
Our legal and compliance teams are real people who respond quickly. If you need a DPA, have clause questions, or want use-case clarity, we are here.