Vmatic Global Technologies Private Limited Fraud Intelligence • Device Risk • Fraud Operations
Trust • Privacy • Security

Cyber Security Compliance Policy for General Knowledge and Information

General cybersecurity guidance and a transparent description of the service’s intended security role.

Effective date: 21 October 2026Product policyIndia
Important: This policy page is a product-specific draft for review. It must be checked against the current app permissions, data flows, vendors, retention schedules and applicable legal requirements before publication.

1. Purpose and Important Notice

This document provides general cybersecurity information for VMATIC Shield users. It is educational and does not constitute legal, financial, forensic, incident-response or professional security advice. It does not certify that Vmatic or the app complies with every law, standard, regulator direction or security framework.

2. Security by Design

VMATIC Shield is designed to evaluate available device, application, behavioural and contextual indicators to help identify possible digital-fraud risk. The website describes an additive intelligence approach intended to complement existing security and fraud controls. Actual capabilities depend on the deployed product, configuration and integrations.

Security design should follow least privilege, data minimisation, secure defaults, defence in depth, controlled access, secure development, monitoring, incident response and continual improvement.

3. General User Safety Practices

Install applications from trusted sources and verify the developer. Avoid installing APK files sent through unsolicited messages. Do not share OTPs, PINs, passwords or screen-sharing access with callers. Independently verify bank, government, courier, utility and customer-care requests using official contact details. Treat urgency, threats, secrecy and requests to move money as warning signs.

Keep Android and apps updated, use a secure screen lock, review app permissions, remove applications you no longer need, and contact your bank immediately through official channels if you suspect compromise. Report suspected cybercrime to the relevant official Indian reporting channels and local authorities as appropriate.

4. Understanding Permissions and Detection

Permissions provide technical access to specific device features; they do not guarantee that a threat can be detected. Some information is unavailable due to Android restrictions, device configuration or the behaviour of other apps. A risk indicator is not the same as proof of fraud, and absence of an alert is not proof that a device or transaction is safe.

5. Security Incident Handling

If a user suspects fraud, they should prioritise safety: stop communicating with the suspected fraudster, do not install further software, use a trusted device to contact the bank or service provider, request that affected payment instruments or accounts be secured, preserve relevant evidence where safe, and report the incident through official channels. VMATIC Shield is not an emergency response service and should not delay contacting a bank or authority.

6. Compliance Frameworks and Applicable Law

Vmatic should assess legal and contractual requirements applicable to each product and deployment, which may include Indian information-technology and data-protection laws, CERT-In directions where applicable, contractual security obligations and sector-specific requirements imposed on regulated customers. The applicability of a particular control or reporting obligation depends on the entity, system, event and law in force.

Any references to encryption, access control, audit logging, vulnerability management, incident response or privacy by design describe intended control areas and must not be interpreted as a third-party certification or a guarantee of regulatory compliance.

7. Responsible Use and Disclosure

Users must not attempt unauthorised access, malware distribution, credential theft, surveillance or interference with systems. Suspected vulnerabilities should be reported responsibly to business@vmatic.in with enough information to reproduce the issue safely, without including other users’ personal data or exploiting the vulnerability beyond what is necessary to demonstrate it.

8. Updates and Contact

This document may be updated as product features, threats or legal requirements evolve. The latest version should be published on the official website with an effective date. For general security questions, contact business@vmatic.in with the subject “VMATIC Shield Security Information”.

Contact

Vmatic Global Technologies Private Limited

Product: VMATIC Shield

Website: vmaticshield.com

Privacy and policy queries: business@vmatic.in — please use the relevant policy name in the email subject.

↑ Back to top