Compliance Policy
Last Updated: December 5, 2024
Lumiotech Private Limited is committed to maintaining the highest standards of regulatory compliance. This policy outlines our approach to ensuring adherence to applicable laws, regulations, and industry standards governing share management and corporate governance in India.
1. Regulatory Framework
1.1 Primary Regulations
Our platform is designed to ensure compliance with:
- Companies Act, 2013 and related rules
- Securities and Exchange Board of India (SEBI) regulations
- Information Technology Act, 2000
- Indian Contract Act, 1872
- Foreign Exchange Management Act (FEMA), where applicable
1.2 Sector-Specific Regulations
Depending on the nature of your business, our platform supports compliance with:
- Banking regulations (for financial institutions)
- Insurance Regulatory and Development Authority (IRDA) regulations
- RBI circulars on investments and shareholding
- Startup India and MSME compliance requirements
2. Compliance Management
2.1 Governance Structure
Our compliance governance includes:
- A dedicated compliance function
- Regular board oversight
- Cross-functional compliance committees
- External legal and regulatory advisors
2.2 Compliance Monitoring
We maintain ongoing compliance through:
- Automated compliance checks built into the platform
- Regular internal audits
- Regulatory change monitoring
- Quarterly compliance reviews
3. Corporate Governance
3.1 Governance Practices
Our platform supports sound corporate governance through:
- Transparent shareholding records
- Automated statutory registers
- Board meeting and resolution documentation
- Shareholder rights and voting management
3.2 Ethics and Integrity
We maintain high ethical standards through:
- Code of conduct for all employees
- Conflict of interest policies
- Anti-corruption measures
- Whistleblower protection mechanisms
4. Certifications and Standards
4.1 Industry Certifications
We maintain the following certifications:
- ISO 27001 (Information Security Management)
- ISO 9001 (Quality Management)
- SOC 2 Type II compliance
- GDPR readiness certification
4.2 Industry Standards
Our platform adheres to:
- NIST Cybersecurity Framework
- OWASP Top 10 security controls
- FIPS 140-2 for cryptographic modules
- Industry best practices for financial record-keeping
5. Reporting and Disclosure
Our platform facilitates compliance with reporting requirements including:
- Annual returns (Form MGT-7)
- Financial statements (Form AOC-4)
- Significant beneficial ownership reporting
- Board composition and changes (DIR forms)
- Event-based disclosures to regulatory bodies
6. Audit and Assurance
Our audit framework includes:
- Regular internal compliance audits
- Third-party assessment of platform controls
- Penetration testing and vulnerability assessments
- Data accuracy verification procedures
- Audit trails for all system changes
7. Customer Due Diligence
Our platform implements:
- Know Your Customer (KYC) verification
- Anti-Money Laundering (AML) checks
- Politically Exposed Person (PEP) screening
- Ongoing monitoring of suspicious activities
8. Contact Information
Compliance Contact
For compliance-related inquiries or reports:
Email: [email protected]