Skip to main content

Trust Center

Last refreshed: 19 April 2026

Gamyata helps organisations meet accessibility mandates that have real legal weight: ADA, EAA, Section 508, IS 17802. We hold ourselves to the same evidence standard we ask of our customers. Every artifact below is publicly reachable without an account so procurement, legal, security, and accessibility reviewers can verify our posture before a conversation starts.

Sumatak Technologies LLP (India)
Self-attested · third-party audit planned post-GA
trust@gamyata.com

Public Artifacts

Accessibility Statement

Our WCAG 2.2 conformance statement covering Gamyata's own product, supported assistive technology, known limitations, and accessibility contact.

WCAG 2.2 AA
EAA
Section 508

VPAT / ACR

Voluntary Product Accessibility Template generated from a self-scan of gamyata.com using the same engine that powers customer scans.

WCAG 2.2
ITI Standard

Regulatory Mandate Coverage

How Gamyata's engine maps to DOJ Title II (US), EAA (EU), Section 508 (US Federal), and IS 17802 (India). Honest about gaps, not just coverage.

ADA
EAA
Section 508
IS 17802

Data Processing Agreement (DPA)

GDPR Art. 28 template covering subject matter, sub-processors, international transfer mechanism, audit rights, breach notification, and deletion.

GDPR
Schrems II

Privacy Policy

What personal data we collect, why, lawful basis under GDPR Art. 6, named sub-processors, and your CCPA / GDPR rights.

GDPR
CCPA

Cookie Policy

Per-cookie disclosure with category (Essential / Analytics / Advertising), provider, retention, and controls. Honours Sec-GPC and DNT.

GDPR ePrivacy
CCPA

Terms of Service

Service description, acceptable use, accessibility commitment, IP, liability, and termination terms.

Legal

Security & Vulnerability Disclosure

Defence-in-depth controls, dependency scanning cadence, secret management, response SLA, scope, and safe-harbour commitment for good-faith researchers.

Vuln Disclosure
Safe Harbour

Sub-Processors

We engage the following sub-processors to deliver Gamyata. The full Data Processing Agreement template, including international transfer mechanism (EU SCCs + Schrems II addendum), is available at /dpa.

  • Logto: authentication and identity (EU region).
  • Amazon Web Services: compute, storage, networking (ap-south-1 / eu-west-1).
  • Razorpay: payment processing (India).
  • Anthropic: large-language-model inference for AI agents (US, zero-retention agreement).
  • OpenAI: large-language-model inference for AI agents (US, zero-retention agreement).
  • Sentry: error monitoring with PII scrubbing (EU region).
  • PostHog: product analytics, opt-in only (EU region).

Reach Us