CERT-In Incident Reporting — Customer-facing Summary

Document ID: TC-LEGAL-004A Title: CERT-In Incident Reporting Summary Version: 1.1 Last updated: 2026-10-24 Publisher: Timecampus Technologies Pvt. Ltd. (Burdenoff Group) Canonical location: https://burdenoff.com/contracts/timecampus/TC-LEGAL-004A Burdenoff Group Contract Registry — root at https://burdenoff.com/contracts (one subgroup per product). The contracts referenced in this document belong to the TimeCampus subgroup at https://burdenoff.com/contracts/timecampus/. Every referenced contract is identified by its Document ID (TC-LEGAL-### / TC-PRICING-###) and incorporated by reference.

This is a customer-facing summary of Timecampus's compliance with the CERT-In Cyber Security Directions dated 28 April 2022 under Section 70B(6) of the Information Technology Act, 2000.

For the internal operational procedure, see SOP BUR-SOP-027 (CERT-In Incident Reporting).

Commitments

• 6-hour reporting: Timecampus reports qualifying cyber security incidents to CERT-In (incident@cert-in.org.in) within 6 hours of noticing or being notified, using the prescribed format and via the prescribed channel.
• 180-day log retention in India: Timecampus retains ICT system logs relevant to incident investigation for at least 180 days within Indian jurisdiction.
• Time synchronisation: production systems synchronise clocks with NPL / NIC time servers (or an equivalent stratum source) to ensure consistent timestamps across incident timelines.
• Coordinated disclosure: where an incident impacts Customer Personal Data (which, for a time-intelligence platform, may include employee, team member or expense and billing data), Timecampus will additionally notify the affected Customer per DPA §4.8 (within 72 hours of confirmation) and provide a post-incident report.

Indian public-sector customers

For public-sector Customers, additional commitments under the Public Sector Addendum §5 apply, including support for MeitY auditor-empanelled security audit.

Reference and incorporation

All Burdenoff Group contracts, addenda, exhibits, policies and registers referenced in this document are identified by their Document ID (TC-LEGAL-### or TC-PRICING-###) and are published at https://burdenoff.com/contracts. Each such referenced document is incorporated into this document by reference. The version of a referenced document that applies is the version published at https://burdenoff.com/contracts as at the Effective Date of the applicable Order Form (or, where no Order Form exists, the version current at the date of acceptance), unless an executed Order Form specifies a frozen version.