DPDP ACT 2023 & ISO/IEC 27037 COMPLIANT

Privacy & Digital Evidence Protection Policy

How Lead Investigator Sunil Kumar Jangid safeguards confidential counsel briefings, sensitive litigation strategies, and court-admissible digital artifacts with air-gapped forensic security and strict legal privilege.

Effective: October 13, 2026•Applicable Act: Digital Personal Data Protection Act, 2023•ISO/IEC 27037 Standards

1. Scope: Web Inquiries vs. Forensic Case Evidence

At Cyber Sunil (cybersunil.in), we maintain a strict architectural distinction between general website inquiries and highly classified digital evidence handled in our forensic lab:

Category A: Counsel & Intake Briefs

Includes advocate name, bar council enrollment, phone number, email address, forum/jurisdiction, and preliminary non-privileged case summaries submitted via our secure intake form.

Category B: Evidentiary Case Artifacts

Raw disk bitstream images (.E01 / .DD), mobile extractions (.tar / UFED), Call Detail Records (CDR), IPDR text dumps, CCTV footage, and WhatsApp database archives.

2. Air-Gapped Physical & Logical Evidence Isolation

Unlike standard commercial IT vendors, digital evidence submitted to Sunil Kumar Jangid is never hosted on third-party public clouds (AWS, Google Drive, Dropbox, or OneDrive):

  • Air-Gapped Workstations: Evidence acquisition, hex analysis, and database decoding take place exclusively on offline forensic rigs disconnected from the public internet and local LANs.
  • Zero Cloud Ingestion: Raw case dumps, victim/suspect media, and CDR files are never uploaded to commercial cloud servers or external API endpoints.
  • Cryptographic Integrity Hashing: Immediately upon intake, SHA-256 and MD5 hashes are generated and logged to ensure tamper-proof mathematical proof of authenticity under Section 65B IEA / Section 63 BSA.

3. Absolute Zero-AI-Training Guarantee

We recognize that litigation data often contains sensitive corporate trade secrets, unfiled defense strategies, and personal digital interactions:

Strict AI Containment Policy

No case evidence, chat logs, call logs, or counsel briefing notes are ever transmitted to or processed by commercial AI models (such as OpenAI ChatGPT, Anthropic Claude, or Google Gemini) for training, summarization, or public indexing.

4. Privileged Professional Communication

Technical assessments, forensic feasibility reviews, and cross-examination questions prepared for an enrolled advocate are classified as Attorney-Client Privileged Work Product under Sections 126 and 129 of the Indian Evidence Act, 1872.

We will never disclose, share, or testify regarding client communications or work product without the express written instruction of the instructing counsel, unless formally ordered by a High Court, Supreme Court, or Sessions Court judge through a valid judicial subpoena.

5. Grounds for Processing under DPDP Act, 2023

Under the Digital Personal Data Protection Act, 2023, data is processed solely on the following lawful bases:

  • Consent & Contractual Performance: Processing intake submissions to schedule consultations and execute forensic engagement agreements.
  • Legitimate Uses (Section 7 DPDP Act): For compliance with judicial orders, enforcement of legal rights, preparation of evidence for judicial proceedings, or assisting Law Enforcement Agencies under the BNSS / CrPC.

6. Evidence Retention & Secure Sanitization (NIST 800-88)

Case artifacts are preserved only for the duration required to conclude the forensic report, testify in court, or satisfy appellate retention requirements requested by counsel.

Upon case closure or formal written request by instructing counsel:

  • Physical storage media provided by the client are returned in person or via insured tamper-evident courier.
  • Working forensic copies on our laboratory drives undergo cryptographically verified multi-pass sanitization in accordance with NIST SP 800-88 Rev. 1 (Purge/Clear) and DoD 5220.22-M standards.

7. Data Principal Rights & Grievance Redressal

Under the DPDP Act, you have the right to access, rectify, or request the deletion of your personal intake data (subject to statutory evidentiary retention obligations).

Designated Data Protection & Grievance Officer
Sunil Kumar Jangid
Lead Digital Forensic Investigator • Cyber Crime Consultant
Jaipur, Rajasthan, India
hello@cybersunil.in•+91 7627083968

Statutory Grievance Acknowledgment: within 48 business hours. Redressal within 15 business days.