FortifyHub is a technology services company delivering four complementary practices from a single team. Our engineering staff hold industry-recognised certifications in application security, cloud architecture, and accessible front-end development.
We started FortifyHub because institutions deserve better than stitching together four tools to run a single exam. One platform, built with Indian languages, Indian pricing, and Indian data residency at the core — not as an afterthought.
| Concern | FortifyHub | Typical foreign alternatives |
|---|---|---|
| Pricing | Indian INR · no forex risk | USD pricing, often 3–5× after INR conversion |
| Language | 12+ Indian languages built in | English-only, or translations you manage |
| Support | IST hours · phone + email | US/EU hours, ticket-only |
| Data residency | India + APAC only | Often US-first, compliance ambiguous |
| Proctoring | Built-in · unlimited | Add-on, per-attempt charge |
| Coding exams | 12 languages included | Separate licence for judge service |
| Customisation | Direct access to engineers | Support tickets routed through sales |
| Indian compliance | Designed for DPDP & UGC norms | Compliance via vendor certs, not local design |
We operate under India's Digital Personal Data Protection Act (DPDP) 2023 and run independent security reviews every quarter.
Primary database in Indian & Singapore regions. Webcam snapshots and certificates in Indian region. Email delivery via Resend (EU, GDPR + DPDP). No transfers outside this footprint.
TLS 1.3 everywhere. Hashed passwords. Short-expiry JWTs. Role-based auth audited across 29 admin endpoints. Immutable audit trail on all admin actions. Rate-limited auth endpoints.
Full CSV/Excel/JSON export any time (Premium) or quarterly (Basic/Standard). Data deletion on subscription end. Named data-protection contact. DPA on request.
Authentication bypass, cross-org access, secret handling, input validation, XSS — every finding tracked to closure. Audit report summary available under NDA.
Data fiduciary obligations, consent management, notice requirements — designed to match India's DPDP, not retrofitted from GDPR.
Automated daily backups retained for 30 days. On-demand restore. Disaster-recovery tested.
Start with the 30-day free trial. Run your own exams. Make the decision with data.
