Compliance

At Trayarunya Ventures, we are committed to conducting our business in accordance with the highest standards of ethics, integrity, and compliance with all applicable laws and regulations. This Compliance Policy outlines our approach to regulatory compliance and the measures we take to ensure that our operations, products, and services meet or exceed industry standards and legal requirements.

This policy applies to all employees, contractors, partners, and representatives of Trayarunya Ventures, as well as to our products and services.

Our compliance framework is built on the following key principles:

• Risk-Based Approach: We identify, assess, and prioritize compliance risks relevant to our business and implement appropriate controls to mitigate these risks.
• Continuous Improvement: We regularly review and enhance our compliance program to adapt to changing regulatory landscapes and business environments.
• Accountability: We establish clear roles and responsibilities for compliance throughout our organization.
• Transparency: We maintain open communication with stakeholders about our compliance efforts and performance.
• Ethical Culture: We foster a culture of integrity and ethical behavior that goes beyond mere compliance with laws and regulations.

We are committed to protecting the privacy and security of personal data in accordance with applicable data protection laws, including but not limited to:

• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• Personal Data Protection Act (PDPA)
• Health Insurance Portability and Accountability Act (HIPAA)

Our data protection measures include:

• Implementing appropriate technical and organizational security measures to protect personal data
• Conducting data protection impact assessments for high-risk processing activities
• Maintaining records of processing activities
• Ensuring lawful bases for processing personal data
• Providing transparent information to data subjects about how their data is processed
• Respecting data subject rights
• Reporting data breaches in accordance with legal requirements

For more detailed information, please refer to our Privacy Policy.

We maintain a robust information security program aligned with industry standards and best practices, including:

• Implementation of ISO 27001 framework principles
• Regular security assessments and penetration testing
• Encryption of sensitive data in transit and at rest
• Multi-factor authentication for access to critical systems
• Regular security awareness training for all employees
• Incident response planning and testing
• Vendor security assessment process

Depending on the specific products and services we offer, we adhere to various industry-specific regulations and standards, including:

Healthcare

• Health Insurance Portability and Accountability Act (HIPAA)
• Health Information Technology for Economic and Clinical Health Act (HITECH)
• Good Clinical Practice (GCP) guidelines
• FDA regulations for medical software

Financial Services

• Payment Card Industry Data Security Standard (PCI DSS)
• Anti-Money Laundering (AML) regulations
• Know Your Customer (KYC) requirements

Artificial Intelligence and Machine Learning

• Ethical AI principles and guidelines
• Algorithmic transparency and explainability requirements
• Bias detection and mitigation practices

We maintain a comprehensive compliance monitoring program that includes:

• Regular internal audits and assessments
• Compliance risk assessments
• Key performance indicators (KPIs) for compliance
• Incident reporting and management procedures
• Whistleblower protection mechanisms

We encourage all employees, contractors, and business partners to report any compliance concerns through our designated reporting channels. We prohibit retaliation against anyone who reports compliance concerns in good faith.

We provide comprehensive compliance training to all employees, including:

• New hire orientation on compliance policies and procedures
• Role-specific compliance training
• Annual refresher training on key compliance topics
• Ad-hoc training on emerging compliance issues
• Regular communication on compliance matters

We recognize that our compliance obligations extend to our relationships with third parties. Our third-party risk management program includes:

• Due diligence procedures for selecting and onboarding third parties
• Contractual provisions requiring compliance with applicable laws and regulations
• Ongoing monitoring of third-party compliance
• Periodic reassessment of third-party relationships

Trayarunya Ventures maintains the following certifications and attestations:

• ISO 27001 (Information Security Management)
• SOC 2 Type II (Security, Availability, and Confidentiality)
• HIPAA Compliance Attestation
• GDPR Compliance Attestation

Copies of our certifications and attestations are available to clients and partners upon request, subject to appropriate confidentiality agreements.

If you have any questions or concerns about our compliance program or would like to report a compliance issue, please contact our Compliance Team at:

Email: compliance@trayarunyaventures.com
Phone: +1 (971) 512-1701 (US) / +91-8954333390 (India)

For general inquiries, please contact us at:

Trayarunya Ventures
Email: info@trayarunyaventures.com
Phone: +1 (971) 512-1701 (US) / +91-8954333390 (India)