Skip to content
Log inBook a demo

Built so your InfoSec team says yes

DPDP-aligned, ISO 27001, hosted in India. Every trait, push and export is logged.

Raw identifier·Priya@Example.com·
Normalisedpriya@example.com
SHA-2566bdb7e961d54ddc243ec721e6e211ac0a179b19a9ce2ad52a418198e146e69fe
Platforms receive
Match key only
MetaGoogleSalesforceDialer

Example address. The hash shown is the real SHA-256 of the normalised value.

Zero-knowledge by designRecords are normalised and SHA-256 hashed before activation. Platforms receive match keys, never raw identifiers.
DPDP-aligned, ISO 27001India data residency, audited data licensing, and an audit log for every trait, push and export.
Licensed at sourceFirst-party data and behavioural signals from licensed partners, plus group data. All licensed at source.
Deleted when a pilot endsPilot records are destroyed within seven days, and the audit log goes to your security team.
Report a security concern · Updated 27 July 2026

Found something? Tell us privately.

Security reports help us protect zapIQ customers, users, and connected services. Use the private channel for a suspected vulnerability, security incident, exposed credential, or unexpected access.

Private reporting channelsecurity@zapiq.in

Subject: “Private security report”. If that address is unavailable, email contact@zapiq.in.

Email the security team

Private reporting channel

Email security@zapiq.in with the subject “Private security report”. If that address is unavailable, email contact@zapiq.in.

Please do not include secrets, passwords, private keys, access tokens, OAuth tokens, payment-card details, bank credentials, or unnecessary personal data. Tell us how to reproduce the issue without sending live credentials.

What to include

  • The affected page, API, integration, or service.
  • A concise description of the observed behaviour and potential impact.
  • Reproduction steps using non-sensitive test data.
  • The approximate date and time observed, including time zone.
  • A safe way to contact you for follow-up.

Responsible testing

Do not disrupt service, access another person’s data, change or delete data, use social engineering, attempt physical intrusion, perform denial-of-service testing, or retain data beyond what is necessary to report the issue. Stop testing and report immediately if you encounter personal data, credentials, or customer information.

This page does not authorize access to any system or data. We do not currently operate a public bug-bounty programme.

What happens next

We route security reports to a restricted response process, assess severity and scope, preserve relevant evidence, and coordinate remediation and notifications where required. We may ask for clarification or a safe proof of concept. We will not ask you to send a password, private key, access token, OAuth token, CVV, OTP, or bank credential.

CompanyZAP PRIVATE LIMITEDCIN U69200KA2026PTC219594No. 10, 8th B Cross Road, HAL III Stage
Jeevanbhimanagar, Bengaluru
Karnataka 560075, India