ITA uses Google Cloud for hosting its production systems. We use “us-south” (Bangalore) for spinning all of our cloud infrastructure.

No. The data ingested by the customers belong to them and ITA or its employees or partners don’t have access to the customer data.

Customer data is logically separated in our database using unique identifiers like GSTIN. Our authorization service ensures that all incoming requests are validated against these identifiers for security.

When security researchers report incidents, our team promptly reviews and addresses them before deploying fixes to production. We also reward researchers who identify high-severity issues.

Every new database cluster undergoes a review and verification process to ensure it is created only in Bangalore.