Compliance Policy

Lumiotech Private Limited is committed to maintaining the highest standards of regulatory compliance. This policy outlines our approach to ensuring adherence to applicable laws, regulations, and industry standards governing share management and corporate governance in India.

1. Regulatory Framework

1.1 Primary Regulations

Our platform is designed to ensure compliance with:

• Companies Act, 2013 and related rules
• Securities and Exchange Board of India (SEBI) regulations
• Information Technology Act, 2000
• Indian Contract Act, 1872
• Foreign Exchange Management Act (FEMA), where applicable

1.2 Sector-Specific Regulations

Depending on the nature of your business, our platform supports compliance with:

• Banking regulations (for financial institutions)
• Insurance Regulatory and Development Authority (IRDA) regulations
• RBI circulars on investments and shareholding
• Startup India and MSME compliance requirements

2. Compliance Management

2.1 Governance Structure

Our compliance governance includes:

• A dedicated compliance function
• Regular board oversight
• Cross-functional compliance committees
• External legal and regulatory advisors

2.2 Compliance Monitoring

We maintain ongoing compliance through:

• Automated compliance checks built into the platform
• Regular internal audits
• Regulatory change monitoring
• Quarterly compliance reviews

3. Corporate Governance

3.1 Governance Practices

Our platform supports sound corporate governance through:

• Transparent shareholding records
• Automated statutory registers
• Board meeting and resolution documentation
• Shareholder rights and voting management

3.2 Ethics and Integrity

We maintain high ethical standards through:

• Code of conduct for all employees
• Conflict of interest policies
• Anti-corruption measures
• Whistleblower protection mechanisms

4. Certifications and Standards

4.1 Industry Certifications

We maintain the following certifications:

• ISO 27001 (Information Security Management)
• ISO 9001 (Quality Management)
• SOC 2 Type II compliance
• GDPR readiness certification

4.2 Industry Standards

Our platform adheres to:

• NIST Cybersecurity Framework
• OWASP Top 10 security controls
• FIPS 140-2 for cryptographic modules
• Industry best practices for financial record-keeping

5. Reporting and Disclosure

Our platform facilitates compliance with reporting requirements including:

• Annual returns (Form MGT-7)
• Financial statements (Form AOC-4)
• Significant beneficial ownership reporting
• Board composition and changes (DIR forms)
• Event-based disclosures to regulatory bodies

6. Audit and Assurance

Our audit framework includes:

• Regular internal compliance audits
• Third-party assessment of platform controls
• Penetration testing and vulnerability assessments
• Data accuracy verification procedures
• Audit trails for all system changes

7. Compliance Training

We ensure high compliance awareness through:

• Mandatory compliance training for all employees
• Role-specific regulatory training
• Customer education on compliance requirements
• Regular regulatory updates and briefings

8. Risk Management

Our compliance risk management includes:

• Regular compliance risk assessments
• Monitoring of regulatory changes
• Proactive remediation of compliance gaps
• Business continuity planning

9. Customer Due Diligence

Our platform implements:

• Know Your Customer (KYC) verification
• Anti-Money Laundering (AML) checks
• Politically Exposed Person (PEP) screening
• Ongoing monitoring of suspicious activities

10. Commitment to Compliance

We continuously improve our compliance program through:

• Regular review of policies and procedures
• Incorporation of regulatory feedback
• Engagement with industry working groups
• Investment in compliance technology

11. Contact Information