Customer and payment data encrypted at rest and in transit

Customer PII, KYC documents and payment data are encrypted at rest with KMS-managed keys and in transit with TLS 1.2+; keys are rotated annually.

Requirements

ISO-A.8.24 A.8.24 · Use of cryptography

RBI-DPSC-2021-4 RBI-DPSC-2021 §4 · Digital payment security — application security, API security, transaction authentication (RBI Master Direction on Digital Payment Security Controls, 2021)

SOC2-C1.1 C1.1 · Identifies and maintains confidential information

SOC2-CC6.1 CC6.1 · Logical access security software, infrastructure and architectures

SOC2-CC6.7 CC6.7 · Restricts transmission and movement of information; encryption in transit

Policy

pol-payments · Payments Security Policy

Applications

Amazon Web Services (ap-south-1)Meridian Customer Portal

Third parties

Amazon Web Services (AWS India)

Testing procedure

AWS KMS CMKs, ALB TLS policy. Tests: Amazon Web Services (ap-south-1): RDS and S3 encryption enabled; Meridian Customer Portal: TLS configuration on portal endpoints. Frequency continuous.