Skip to main content
Legal and Governance Center

Legal and Governance Center

Transparency, accountability, and trust in one public reference point.

The Batoi Legal and Governance Center provides open access to our policies, formal certifications, independent assurance information, and ethical standards.

Review each public statement according to its named legal entity, service scope, assessment period, and validity.

View Policies Our Certifications
Legal and Governance Center Banner
Policy directory

Find the document that applies to you

Use the category, audience, scope, and review date to choose the right public document. Each page includes a plain-language guide and the complete policy text.

Privacy and data

4 documents

Privacy Policy

Current

Explains how Batoi collects, uses, shares, protects, retains, and transfers personal information across its public and account-based services.

Audience
Website visitors, account users, learners, customers, and business contacts
Last reviewed
View document

Cookie Policy

Current

Explains how Batoi uses cookies and similar technologies and how visitors can manage their choices.

Audience
Visitors to Batoi websites and digital services
Last reviewed
View document

Services Privacy Policy

Current

Explains how personal information is handled when Batoi provides contracted services and operates supporting systems.

Audience
Customers, customer administrators, and service users
Last reviewed
View document

Customer Data and AI/ML Privacy Policy

Current

Explains personal-information processing associated with Batoi artificial-intelligence and machine-learning activities.

Audience
Customers, users, and individuals whose information may be processed in relevant AI/ML contexts
Last reviewed
View document

Service and website terms

3 documents

Terms of Use

Current

Defines the conditions for accessing and using Batoi websites, accounts, products, software, and services.

Audience
Visitors and users of Batoi websites, products, and services
Last reviewed
View document

Batoi Academy Program Participation Terms

Current

Defines participation conditions for education, curricula, fellowships, research translation, and approved institutional programs led by Batoi’s Academy division.

Audience
Academy participants, institutions, researchers, practitioners, and authorized program users
Last reviewed
View document

Batoi Partnership Program Terms of Service

Current

Defines eligibility, responsibilities, governance, and agreement boundaries for Batoi’s unified Partner Program.

Audience
Applicants and participants in the Batoi Partner Program
Last reviewed
View document

Responsible use and rights

3 documents

Acceptable Use Policy

Current

Defines prohibited activities and responsible-use requirements for Batoi websites, services, APIs, labs, and ecosystem assets.

Audience
Users, developers, customers, learners, and partners
Last reviewed
View document

Intellectual Property Policy

Current

Explains copyright reporting and permitted use of Batoi trademarks, logos, and brand material.

Audience
Rights holders, publishers, partners, customers, and other third parties
Last reviewed
View document

Accessibility Statement

Current

Describes Batoi accessibility objectives, design and testing practices, known scope limits, feedback, and alternate-access options.

Audience
Visitors and users of Batoi websites, products, learning experiences, and support channels
Last reviewed
View document

Security and assurance

1 document

Security and Trust

Current

Describes Batoi security practices, assurance boundaries, certifications, examinations, reporting, and trust information.

Audience
Customers, partners, auditors, security researchers, and public reviewers
Last reviewed
View document
Exchange signing identity

Public verification for Batoi-authored Exchange assets.

Batoi signs exact release artifacts before publication. The public identity below allows an independent reviewer to verify the signature associated with an immutable artifact hash.

A valid signature confirms artifact integrity and Batoi release provenance. It does not confer certification, legal compliance, regulatory approval, or an assurance opinion.

Identity
Batoi Exchange Framework Pack Signing Identity
Algorithm
RSA-3072-SHA256
Key fingerprint
badd8f707cf3b43d155c2d0c3236ff2730c023f6174393fa2fe8ff1aba1e5f2f
Issued
2026-07-23T06:36:50+00:00
View public key 
-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----
Overview

Governance that goes beyond compliance.

At Batoi, legal integrity and ethical governance are cornerstones of our business. This center consolidates all public legal, compliance, and governance documents, giving customers, partners, and auditors a single source of truth for our policies, standards, and commitments.

Governance at Batoi means more than compliance: it means proactive accountability.

Governance at a glance

A quick view of how each governance pillar maps to scope and internationally recognised frameworks.

Information Security

Data protection, DevSecOps, and resilience.

ISO 27001 SOC 2 NIST CSF

Privacy & Data Rights

Privacy rights and cross-border transfer safeguards.

GDPR CCPA SCCs

Ethical AI & Research

Responsible AI, research ethics, and sustainability.

OECD EU AI Act ESG frameworks

Accessibility & Inclusion

Equal digital access across Batoi products.

WCAG 2.2 guidance AODA Section 508

Transparency & Accountability

Corporate and partner governance, audit readiness.

Batoi Governance Charter Continuous Assurance Model
Certifications and Assurance Information

Review certifications, assurance reports, and governance references by their current documented scope.

Formal ISO certifications and the SOC 2 examination described here apply to Batoi Systems Private Limited within the scope stated in the relevant document. They do not automatically extend to every affiliate, product, deployment, or customer environment. Detailed assurance material is shared only through an appropriate secure channel.

  • Certified quality management system
  • Issued by TÜV SÜD South Asia to Batoi Systems Private Limited and currently valid through 15 August 2028, subject to required surveillance audits and the certificate scope.

  • Certified information security management system
  • Issued by TÜV SÜD South Asia to Batoi Systems Private Limited and currently valid through 15 August 2028, subject to required surveillance audits and the certificate scope.

  • Independent Type II examination; not a certification
  • The latest examination covers Security, Availability, Processing Integrity, and Confidentiality for the period 1 September 2024 through 31 August 2025. The restricted-use report is available to eligible parties through a secure review process.

  • Independent privacy assessment; not a certification
  • Batoi Systems Private Limited underwent an independent GDPR assessment completed in 2025. Compliance remains context-specific and includes continuing review and improvement.

  • Healthcare safeguards for applicable services; not a certification
  • The program is supported by contractual safeguards, internal assessment, and external readiness work. Applicability depends on the service, data, customer agreement, and respective HIPAA role.

  • Responsible AI maturity
  • Governance methods informed by Batoi Research; this is not an independent certification.

  • Environmental and social impact metrics
  • Review the current disclosure for scope, period, method, and responsible owner.

Corporate Governance Framework

Batoi’s governance model defines responsibilities for:

  • Separation of Leadership and Oversight: Board and Advisory Council oversight.
  • Research and Ethics Council: Reviews AI, ESG, and innovation initiatives.
  • Partner Governance: Program oversight, review, escalation, and accountability across the partner ecosystem.
  • Risk Management: Defined assessment, treatment, evidence, review, and escalation practices.
  • Assurance Reviews: Internal or independent reviews according to the applicable program and scope.

Governance is embedded in our ecosystem: from code to corporate board.

Reporting Channels

Confidential escalation and assurance.

Batoi offers confidential reporting mechanisms for stakeholders:

  • Whistleblower and Legal Concerns: Submit through the Batoi Contact page.
  • Security Disclosure: Open a confidential request through Batoi Support.
  • Partner Compliance Reporting: Through Batoi Partner Portal → “Governance Reports.”

Submissions are triaged and routed according to the applicable governance, security, privacy, or partner procedure.

Transparency and Continuous Assurance

Governance metrics you can monitor.

Governance reporting and evidence workflows can track approved metrics within their defined scope:

  • Security maturity and risk scores (updated quarterly).
  • Audit completion summaries.
  • ESG and accessibility progress indicators.

Published reports and request-based assurance material state their reporting period, scope, and responsible owner.

Frequently asked questions

The Legal and Governance Center consolidates Batoi’s privacy, terms, security, and compliance policies, ensuring transparency and easy access for all stakeholders.

Use the Certifications and Trust page to review current certification or attestation information. Each item must be read according to its published legal entity, service scope, issuing body, report period, and validity.

Batoi reviews public policies and certification records according to applicable obligations, material service changes, review schedules, and the validity periods stated in the relevant documents.