Security & Regulatory Compliance
How AMARACUS protects your data and keys, which standards it implements, and which privacy laws it is built to meet.
Indian Regulatory Alignment
Full technical alignment with the Digital Personal Data Protection Act, 2023 (DPDPA), Indian IT Act 2000, and CERT-In Directions 2022 (180-day log preservation & 6-hour incident disclosure).
European Union GDPR
Built to support the GDPR (Regulation 2016/679) rights of access, erasure and portability (Articles 15, 17 and 20) with self-service JSON data export and account erasure in the dashboard. This describes product features; it is not a certification or a legal opinion that any particular use complies with the GDPR.
NIST Post-Quantum Standards
FIPS 203 (ML-KEM) and FIPS 204 (ML-DSA) through the @noble/post-quantum library, alongside classical AES-256-GCM, Ed25519 and X25519. FIPS 205 (SLH-DSA) is not offered.
Application Security Architecture
Scrypt password hashing with high-entropy salt, timing-safe verification, isolated non-executable file uploads with magic-byte filters, and dual-store fault tolerance.
Legal & Operational Policies Directory
Indian Business & IT Law Governance
Third-Party Open-Source & Visual Asset Register
Amaracus operates under a strict Zero-Hotlink and Verified-License standard. All fonts, icons, styling frameworks, and visual marks used across the application are vetted for commercial deployment, redistribution rights, and copyright attribution compliance.
- Newsreader (Serif): Production Type (Lucas Sharp & Hugues Gentile). Free commercial use & web embedding.
- Inter (Sans-serif): Rasmus Andersson. Free commercial use & web embedding.
- JetBrains Mono (Monospace): JetBrains s.r.o. Free commercial use & code rendering.
All font families licensed under the SIL Open Font License, Version 1.1. No font files are sold independently.
- Lucide Icons: Lucide Project / Feather Icons. Permissive ISC License. Royalty-free commercial use.
- Tailwind CSS: Tailwind Labs Inc. MIT License. Built-in responsive utilities & reduced-motion safe transitions.
- UI Design System: Bespoke in-house React components. No purchased commercial templates or third-party theme kits.
Embedded directly via bundled vector trees; zero third-party font-icon CDN dependencies.
- Google “G” Logo: Proprietary trademark of Google LLC. Used strictly under Google Identity Services Sign-in Branding Guidelines for authentication button display.
- Amaracus Shield Icon: Proprietary vector artwork (Copyright © 2026 Amaracus Technologies). All rights reserved.
Third-party marks are the property of their respective owners and utilized solely for identification and interoperability.
- Raster Photography: Zero third-party stock photos or unverified raster graphics.
- Video & Motion Assets: Zero external video CDNs or streaming embeds.
- Hotlinking Defense: 100% of assets are compiled locally or delivered via self-hosted endpoints, eliminating tracking beacons.
Reviewed October 2026. Review complete license register in THIRD_PARTY_LICENSES_AND_ASSET_REGISTER.md.