What Ambharii Labs handles, what it doesn't, and how that fits into your audit. No logos, no certifications we don't hold, no marketing.
Last updated · 2026-05-05Two columns. Read carefully. We say what we do and what we explicitly do not do, so vendor questionnaires answer themselves.
For each regime, alignment — not certification. Ambharii Labs does not hold these audits. Engagements operate within the client's existing certification regime, with our work providing evidence artifacts the client's auditor can accept.
Bulwark, argus-ai, PulseFlow, TorchForge, CLARIFY, and ScalableGen are distributed under Apache 2.0. Customers run them on customer infrastructure.
Ambharii has no operational access to deployments and no data egress from customer environments. There is no telemetry, no phone-home, and no managed service component. Once installed, the software runs on the client's compute under the client's compliance regime.
Source code, release artifacts, and SBOM are publicly available on GitHub. Vulnerability disclosure follows each repository's SECURITY.md.
Static-site infrastructure only. None of the services below receive customer data — because no customer data flows through Ambharii infrastructure in the first place.
| Service | Purpose | Customer data? |
|---|---|---|
| GitHub (Pages) | Hosts ambharii.com and source repositories | None |
| Google Workspace | Receives email at anil@ambharii.com | None |
If this list ever changes — e.g., we add an analytics provider or a hosted demo — this page is updated and the change is dated.
For vulnerabilities in our open-source products (Bulwark, argus-ai, etc.), follow the SECURITY.md file in the relevant repository.
For vulnerabilities affecting ambharii.com or general security questions, email anil@ambharii.com. We aim to acknowledge promptly.
Responsible disclosure is welcomed. We will not pursue legal action against researchers who follow standard disclosure practices and act in good faith.
We respond to standard vendor security questionnaires (CAIQ, SIG Lite, custom client templates) when scoped to actual engagements.
For scoping, send the questionnaire and engagement scope to anil@ambharii.com. Most questions resolve to "out of scope — no customer data on Ambharii infrastructure"; this page is the source for that answer.