1. About this page
This page brings together the facts a client, partner or auditor usually asks us for before working with us. How we handle personal data is explained in our Privacy Policy, and how we protect systems and handle vulnerability reports in our Security Policy. The contract terms for our services are in the Terms of Service.
2. Business registrations
EthicsComputer LLP is a limited liability partnership registered with the Ministry of Corporate Affairs under the Limited Liability Partnership Act, 2008 (LLPIN ADD-7488, incorporated on 2 November 2026). Its designated partners are Vinay Grover and Anita Devi. The business was founded in Rohtak, Haryana in February 2018 and ran as Vinay Grover's sole proprietorship until the LLP was formed; it has its head office in Rohtak and a branch office in Jhajjar. Our LLPIN, PAN, GSTIN and Udyam (MSME) registration are listed under Contact and grievance officer below. You can check them yourself on the government portals:
| Registration | What it is | How to check it |
|---|---|---|
| LLPIN | Registration of the limited liability partnership with the Ministry of Corporate Affairs, Government of India. | On the MCA portal, open "View Company or LLP Master Data" and search by LLPIN. |
| GSTIN | Registration under the Central Goods and Services Tax Act, 2017 and the Haryana GST law. It appears on every tax invoice we issue. | On the GST portal, choose "Search Taxpayer" and then "Search by GSTIN/UIN". |
| Udyam registration | Registration as a micro, small or medium enterprise with the Ministry of MSME, Government of India. | On the Udyam Registration portal, use "Verify Udyam Registration Number". |
3. Certifications and memberships
ISO certifications
| Standard | What the standard covers |
|---|---|
| ISO 9001:2015 | Quality management: how we plan, deliver, check and improve our work. |
| ISO/IEC 27001:2022 | Information security management: how we identify information security risks and control them. |
| ISO/IEC 20000-1:2018 | IT service management: how we deliver and support IT services. |
You can view and download the certificates on our About page. Each certificate states its scope, certificate number, issuing certification body and validity. To confirm that a certificate is current, check it with the certification body named on it.
Technology partner programs
We are an AWS Partner, a Microsoft Partner and a Google Cloud Partner. These names and their logos are trademarks of their owners.
Awareness campaigns
We are a Champion of the National Cybersecurity Alliance's Cybersecurity Awareness Month (2023, 2024, 2025 and 2026) and Data Privacy Week (2023, 2024 and 2026). A Champion is a registered supporter that promotes the campaign's message; it is not a certification or an award. Our Disclaimer explains what each badge means.
4. Laws and frameworks we follow
| Law or framework | What it means for how we work |
|---|---|
| Information Technology Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 | We keep reasonable security practices to protect sensitive personal data, as section 43A of the Act requires. The Rules name ISO/IEC 27001 as one recognised standard for this, and we are certified to it. Because unauthorised access to a computer system is unlawful under the Act, we test only with written authorisation (section 6). |
| Digital Personal Data Protection Act, 2023 and Digital Personal Data Protection Rules, 2025, as their provisions come into force | For our own enquiries, accounts and partner records we give notice, rely on consent or another lawful ground, apply reasonable security safeguards, respond to rights requests and report personal data breaches as the law requires. When we process personal data for a client, we act as the client's Data Processor, under contract and on the client's instructions. Details are in our Privacy Policy. |
| CERT-In Directions of 28 April 2022, issued under section 70B(6) of the IT Act | We report the cyber incidents listed in the Directions to CERT-In within 6 hours of noticing them, keep logs of our ICT systems for 180 days within India, and synchronise our system clocks with a recognised time source. Where we manage a client's systems, we tell the client about an incident promptly so that the client can report within the time limit. |
| Consumer Protection Act, 2019 and Consumer Protection (E-Commerce) Rules, 2020 | We show our business details, the total price with taxes, and our Refund & Cancellation Policy, and we have a grievance officer who acknowledges a complaint within 48 hours and resolves it within one month (see Contact and grievance officer below). |
| Central Goods and Services Tax Act, 2017 and related GST laws | We charge GST at the applicable rate, show it on tax invoices, and issue credit notes when we refund. |
| Income-tax law: tax deducted at source (TDS) on commission | We deduct TDS from partner commission payouts where the law requires it (section 194H of the Income-tax Act, 1961, and the matching provision of the Income-tax Act, 2025 that replaces it from 1 April 2026), deposit it with the government and issue TDS certificates. Partners give us a valid PAN for this. |
| Indian Contract Act, 1872 | Our work is agreed in written proposals, statements of work and contracts, together with our Terms of Service. |
| Copyright Act, 1957 | We assign the rights in deliverables to clients in writing on completion and full payment, and we follow the licences of third-party and open-source components. |
| Prevention of Corruption Act, 1988 | The Act makes it an offence to give or promise an undue advantage to a public servant. We do not do so, directly or through anyone acting for us (see section 7). |
For a client whose project is subject to a foreign data protection law, such as the EU General Data Protection Regulation, we agree the necessary data processing terms in the project contract.
5. What we are, and what we are not
| Area | What we are | What we are not |
|---|---|---|
| Security testing | We carry out VAPT and security audits that follow CERT-In guidelines, only under written authorisation. | We are not a CERT-In empanelled auditor. If a regulator, government body or customer requires a report from an empanelled auditor, our report does not meet that requirement, so please tell us before you order. |
| Payment security | We test payment flows (such as gateway callbacks and order amounts) as part of web application VAPT. | We are not a PCI Qualified Security Assessor (QSA) or Approved Scanning Vendor (ASV), so our work does not replace a formal PCI DSS assessment or ASV scan. |
| CA and tax work | CA, tax and compliance work is delivered with qualified CA professionals, and certificates that must be signed by a Chartered Accountant are signed by them. | EthicsComputer LLP is not itself a firm of Chartered Accountants and does not sign audit reports or CA certificates in its own name. |
| Legal documents | We draft and review business agreements such as NDAs and service contracts. | This service does not include representing you before a court or tribunal. |
| ISO certification | Our own management systems are certified, and we help clients prepare for ISO/IEC 27001 certification. | We do not certify other organisations. Certificates are issued by an independent certification body. |
| Technology partners | We are registered in the AWS, Microsoft and Google Cloud partner programs. | We are not those companies and do not speak for them. Support for their products remains with them. |
6. Our rules for ethical security testing
- Written authorisation first: no testing starts until a person with authority over the systems has signed an authorisation.
- Agreed scope: the authorisation names the targets, the testing window, the permitted methods, any exclusions and the emergency contacts. We stay within it. Anything outside the scope that we notice by chance is reported to you, not explored further.
- Third-party hosting: where systems are hosted by a cloud or hosting provider, the client obtains any permission the provider requires.
- Safe methods: we do not run destructive tests, such as denial-of-service, unless you approve them in writing, and we stop at once if you ask or if a system becomes unstable.
- Minimum data: we access only the data needed to prove a finding, and do not copy, keep or change personal data beyond that.
- Confidential findings: findings and reports go only to the contacts named in the authorisation, through a secure channel, and are handled under our NDA & Confidentiality Policy.
- Clean-up: test accounts, files and evidence are removed or deleted after the engagement, as agreed with you.
- No publication: we never publish a client's vulnerabilities. If we find a flaw in a third-party product while testing, we agree with you how to report it to the vendor.
- Refusal: we decline any request to test a system that the person asking does not own or control.
To report a vulnerability in our own website or systems, please follow our Security Policy.
7. Anti-bribery and ethical conduct
- We do not offer, pay, ask for or accept bribes or kickbacks, whether to or from public officials or private parties, to win or keep business.
- We make no unofficial payments to speed up registrations, filings or approvals. Government fees we pay for clients are the official fees, backed by receipts.
- Gifts and hospitality, if any, are modest and occasional, and are never used to influence a decision.
- Business partners who sell our services must follow the same rules. Commission is paid only to the partner's bank account, after TDS, never in cash.
- Staff tell us about any conflict of interest, and we tell a client if one affects their work.
- We state only the certifications, partnerships and results we can back up. If you think a claim on our website is wrong, please tell us.
- You can raise a concern about our conduct in confidence by writing to info@ethicscomputer.in for the attention of the grievance officer. We do not penalise anyone for raising a concern in good faith.
8. How to verify documents we issue
| Document | Where to check it | What you need |
|---|---|---|
| Course and internship certificates | Certificate verification | The certificate number or ID printed on it |
| Internship offer acceptance | Offer verification | The offer verification number |
| Intern ID cards | Intern ID verification | The intern ID, or scan the QR code on the card |
| Signed NDA and IP agreements of interns | Agreement verification | The QR code or verification link on the document |
| Partnership agreements and MOUs | Partnership agreement verification | The QR code or verification link on the document |
| Partner credentials and partner certificates | Partner verification | The partner code or certificate number |
| Our ISO certificates | About page | Then confirm with the certification body named on the certificate |
| Our LLPIN, GSTIN and Udyam registration | Government portals (section 2) | The numbers under Contact and grievance officer below |
Quotes, proposals and invoices from us come from an email address ending in @ethicscomputer.in or through our portals. If a document cannot be verified, or someone asks you to pay into an account that is not on our invoice, do not rely on it: call us on +91 90532 10052 or write to info@ethicscomputer.in.
9. Compliance help we offer clients
- CERT-In compliance and readiness: incident reporting process, log retention and the steps the CERT-In Directions require.
- DPDP Act compliance and readiness: notices, consent, data mapping and breach response for the Digital Personal Data Protection Act, 2023.
- ISO 27001 readiness and implementation: preparing your organisation for certification.
- Compliance consulting and security readiness.
- VAPT and AI security and compliance.
- Cyber incident response, including the emergency response service.
- CA and CS services, TDS and tax compliance and ROC annual filing, delivered with qualified CA professionals.
- NDA, contract and agreement drafting.
Readiness work prepares you for an audit or certification. The certificate itself is issued by an independent certification body, and regulatory approvals are decided by the authority concerned.
10. Raising a compliance concern
Write to info@ethicscomputer.in about any compliance question or concern. To report a security vulnerability, follow our Security Policy. Complaints are handled by the grievance officer listed below, within the times shown there. We update this page when our registrations, certifications or the law change; the date at the start of the page shows the current version.
Contact and grievance officer
- Business
- EthicsComputer LLP, a limited liability partnership incorporated on 2 November 2026
- Registered office
- 1886/34, New Vijay Nagar, Shivaji Colony, Rohtak, Haryana 124001, India
- LLPIN
- ADD-7488
- PAN
- AANFE4786A
- Designated partners
- Vinay Grover and Anita Devi
- GST invoices
- Until the LLP's own GST registration is issued, tax invoices are issued by EthicsComputer (Vinay Grover, sole proprietor), GSTIN 06DEMPG0824K1ZH, Udyam UDYAM-HR-16-0001574.
- Grievance officer
- Vinay Grover, Designated Partner
- info@ethicscomputer.in (billing: support@ethicscomputer.in)
- Phone
- +91 90532 10052, Monday to Saturday, 9:00 AM to 7:00 PM IST
We acknowledge every complaint within 48 hours and resolve it within one month of receiving it. Please include your name, phone number, the page or service concerned, and any order, invoice or transaction ID.
