Due Diligence Framework Summary
• Intermediary Role: Rudram Softech provides computer resources, multi-tenant cloud SaaS platforms (EduSec, VheTM), and web portals for enterprise clients, operating as an Intermediary under Section 2(1)(w) and Section 79 of the Indian IT Act, 2000.
• Zero Content Modification: We do not initiate data transmissions, select recipients, or alter user-generated institutional records.
• Rule 3(1)(b) Prohibitions: Comprehensive ban on deepfakes, copyright infringement, defamatory content, online gambling, malware, and sovereignty threats.
• Expedited 36-Hour Removal: Statutory removal upon valid court order or government direction, with emergency 24-hour removal for non-consensual imagery and mandatory 180-day forensic log preservation.
• Global Harmonization: Fully aligned with the US Digital Millennium Copyright Act (DMCA) and EU Digital Services Act (DSA).
Statutory Basis & Intermediary Status
This Intermediary Compliance Policy and Due Diligence Statement is published by Rudram Softech Pvt. Ltd. ("Rudram Softech", "Company", "We", "Us") in strict compliance with:
- Section 79(2)(c) of the Information Technology Act, 2000 (as amended from time to time);
- The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (as amended in 2022 and 2023) (the "IT Rules");
- Section 512 of the United States Digital Millennium Copyright Act (17 U.S.C. § 512); and
- Articles 4, 5, and 6 of the European Union Digital Services Act (Regulation (EU) 2022/2065).
Rudram Softech operates as an "Intermediary" as defined under Section 2(1)(w) of the IT Act, 2000, providing enterprise software platforms, database hosting, cloud compute infrastructure, APIs, and public digital resources on behalf of educational institutions, academies, commercial enterprises, and Authorized Users.
Mandatory Due Diligence: Prohibited Content Catalog
In accordance with Rule 3(1)(b) of the IT Rules, 2021, Rudram Softech hereby informs all visitors, customers, faculty, students, and Authorized Users that they are strictly prohibited from hosting, displaying, uploading, modifying, publishing, transmitting, storing, updating, or sharing any information or content that:
- Belongs to another person: and to which the user does not have any legal right or written authorization;
- Is grossly harmful, harassing, or defamatory: is obscene, pornographic, pedophilic, invasive of another's privacy (including bodily privacy), insulting or harassing on the basis of gender, racially or ethnically objectionable, disparaging, relating or encouraging money laundering or illegal gambling;
- Harms minors in any way: causes physical, mental, or moral detriment to children or minors;
- Infringes intellectual property: infringes any patent, trademark, copyright, trade secret, or other proprietary rights of any third party;
- Deceives or misleads the addressee: regarding the origin of the message or knowingly communicates misinformation, falsehoods, or unverified claims designed to mislead;
- Impersonates another person: or entity, including university officials, students, or authorized corporate officers;
- Deceptive synthetic media & deepfakes: contains synthetic images, audio, or video that artificially mimic real individuals without explicit, prominent disclosure of synthetic generation;
- Contains computer contaminants or malware: contains software viruses, trojan horses, worms, logic bombs, keyloggers, automated scrapers, or any code designed to interrupt, destroy, or limit the functionality of any computer resource;
- Threatens national sovereignty or public order: threatens the unity, integrity, defense, security, or sovereignty of India, friendly relations with foreign states, or public order, or causes incitement to the commission of any cognizable offence, or prevents investigation of any offence, or insults any other nation; or
- Violates applicable law: violates any law for the time being in force in India or the user's jurisdiction.
Termination of Access: In accordance with Rule 3(1)(c), users who fail to comply with these rules face immediate suspension of their account, revocation of user licenses, and permanent deletion of non-compliant data without refund.
Passive Hosting & Statutory Safe Harbor (Section 79)
Under Section 79(2)(a) and (b) of the Information Technology Act, 2000, Rudram Softech satisfies all statutory conditions to enjoy complete immunity and safe harbor protection from third-party liabilities:
- The provision of access by Rudram Softech is limited to providing a technical transmission facility or cloud hosting infrastructure over which information made available by third parties is transmitted, cached, or temporarily stored;
- Rudram Softech does not initiate the transmission of user-generated data;
- Rudram Softech does not select the receiver of the transmission; and
- Rudram Softech does not select or alter the information contained in the transmission.
Notice & Takedown Procedure (36-Hour Removal)
In compliance with Section 79(3)(b) of the IT Act and Rule 3(1)(d) of the IT Rules:
- Triggering Grounds: Upon receiving actual knowledge in the form of an official court order issued by a court of competent jurisdiction, or upon being notified by an authorized government agency under Section 79(3)(b), regarding any unlawful content residing on our computer resources;
- Statutory Timeline: Rudram Softech shall act expeditiously to remove, disable, or block public access to the specified unlawful content within thirty-six (36) hours of receiving such lawful order or formal government direction; and
- Emergency Non-Consensual Imagery: Where a grievance relates to content exposing the private area of an individual, full or partial nudity, or non-consensual sexual depictions (including deepfakes), access shall be disabled within twenty-four (24) hours pursuant to Rule 3(2)(b).
Mandatory 180-Day Data Preservation (Rule 3(1)(h))
Assistance to Law Enforcement Agencies (LEA)
In compliance with Rule 3(1)(j) of the IT Rules, 2021, Rudram Softech confirms that upon receipt of a lawful, verified written order issued by an authorized government agency stating the statutory purpose:
- We shall provide information in our possession or technical assistance within seventy-two (72) hours of receipt of the lawful order; and
- Such assistance is provided strictly for verification of identity, cybersecurity threat analysis, or the prevention, detection, investigation, or prosecution of cognizable offences under applicable law.
CERT-In Cyber Security Incident Reporting
Pursuant to Section 70B of the Information Technology Act, 2000 and the Directions issued by the Indian Computer Emergency Response Team (CERT-In) under Rule 12 of the CERT-In Rules:
- Rudram Softech monitors its cloud hosting networks for qualifying cybersecurity incidents, including ransomware attacks, unauthorized system compromises, data breaches, and volumetric DDoS assaults; and
- We mandatorily report qualifying cybersecurity incidents to CERT-In within six (6) hours of becoming aware of such incidents, cooperating fully with authorized technical directives.
DMCA Copyright Takedown & Counter-Notice Procedure
For rights-holders globally and under Title 17 of the United States Code (17 U.S.C. § 512):
8.1 Formal Takedown Notice: If you believe your copyrighted work has been uploaded or displayed without authorization on our platforms, submit a formal notice containing: (i) your physical or electronic signature; (ii) identification of the copyrighted work; (iii) exact URL or tenant location of the infringing content; (iv) contact address, phone number, and email; (v) a statement of good-faith belief; and (vi) a statement under penalty of perjury that the notification is accurate.
8.2 Counter-Notification Procedure (17 U.S.C. § 512(g)): If you believe your content was disabled or removed by mistake or misidentification, you may submit a Counter-Notification to our Designated Agent containing: (i) your physical or electronic signature; (ii) identification of removed material and prior location; (iii) a statement under penalty of perjury of good-faith belief of error; and (iv) consent to the jurisdiction of the federal district court. Upon receipt, we forward the counter-notice to the original complainant, restoring access in 10 to 14 business days unless legal action is filed.
Statutory Grievance Redressal Officer & Workflow
Pursuant to Rule 3(2) of the IT Rules, 2021, Rudram Softech has appointed a dedicated Statutory Grievance Officer:
Mr. GirishKumar Prajapati
321, 3rd Floor, Maruti Plaza, Nr. Vijay Park BRTS Bus Stand, Krishnanagar,
Ahmedabad - 382345, Gujarat, India
Our 4-Step Grievance Disposal Protocol:
Appellate Mechanism (Grievance Appellate Committee - GAC)
In compliance with Rule 3A of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (as amended 2022/2023), any user or aggrieved individual who is dissatisfied with an order or resolution passed by our Grievance Officer may prefer an appeal to the government-constituted Grievance Appellate Committee (GAC):
- Filing Window: The appeal may be preferred online within thirty (30) days from the date of receipt of communication from our Grievance Officer; and
- Compliance: Rudram Softech complies fully with all directions, orders, and rulings promulgated by the Grievance Appellate Committee.