This Legal Policy outlines the regulatory compliance framework, intellectual property protections, data governance standards, and legal obligations applicable to Neon Cloud's operations and the use of its Services. This Policy supplements the Terms & Conditions and Privacy Policy.
3.1 Corporate Structure & Jurisdiction
Neon Cloud operates through the following legal entities:
| Entity | Jurisdiction | Role |
|---|---|---|
| Neon Cloud Private Limited | India | Primary operations, India & APAC customers |
Each entity operates independently as a contracting party for customers in its respective region. Intercompany agreements govern service delivery, data flows, and intellectual property licensing between entities.
3.2 Regulatory Compliance
A. India
- ·Information Technology Act, 2000 and IT (Reasonable Security Practices) Rules, 2011.
- ·Digital Personal Data Protection Act, 2023 (DPDPA) — compliance framework in progress as rules are finalized.
- ·Reserve Bank of India guidelines for handling payment data.
- ·Goods and Services Tax (GST) compliance for all domestic transactions.
- ·CERT-In cybersecurity incident reporting directives (six-hour reporting window).
B. United States
- ·State-level data privacy laws including CCPA/CPRA (California), and other applicable state regulations.
- ·HIPAA compliance available for healthcare workloads under a Business Associate Agreement (BAA).
- ·SOX compliance considerations for publicly traded customers.
- ·Export Administration Regulations (EAR) and OFAC sanctions compliance.
C. International
- ·General Data Protection Regulation (GDPR) for any EU/EEA data subjects whose data we process.
- ·Standard Contractual Clauses (SCCs) for cross-border data transfers.
3.3 Data Sovereignty & Localization
Neon Cloud is committed to data sovereignty. Customer Data in India is stored and processed exclusively within Indian data centres (DEL1 — Delhi NCR) unless the Customer explicitly opts for cross-border replication.
Data localization is a core differentiator of our platform and aligns with the regulatory direction of multiple jurisdictions. Customers requiring data residency guarantees may request a Data Processing Agreement (DPA) specifying applicable data locations.
3.4 Intellectual Property
Neon Cloud's platform is built on open-source technologies. Our proprietary contributions, branding, documentation, control panel interfaces, orchestration layers, and custom integrations are owned by the respective Neon Cloud entity.
Open-source components are governed by their respective licenses (Apache 2.0, GPL, LGPL, etc.) and Neon Cloud complies fully with all upstream license obligations.
Customer-developed applications, configurations, scripts, and data remain the Customer's sole intellectual property. Neon Cloud makes no claim to Customer IP.
3.5 Law Enforcement & Government Requests
Neon Cloud will comply with valid, legally binding requests from law enforcement or governmental authorities. Our principles for handling such requests are:
- ·We will notify the affected Customer before disclosing data unless prohibited by law or court order.
- ·We will challenge requests that are overbroad, vague, or lack proper legal basis.
- ·We will provide only the minimum data required to satisfy the legal obligation.
- ·We maintain a transparency report (published annually) summarizing the volume and nature of requests received.
3.6 Anti-Corruption & Anti-Bribery
Neon Cloud and its employees, officers, partners, and agents shall comply with all applicable anti-corruption and anti-bribery laws, including the Prevention of Corruption Act, 1988 (India) and the U.S. Foreign Corrupt Practices Act (FCPA). Channel partners must certify compliance with these standards as part of their partner agreement.
3.7 Export Controls & Sanctions
Customers represent and warrant that they will not use the Services in violation of any applicable export control laws or trade sanctions. Neon Cloud reserves the right to deny or terminate service to any individual, organization, or country subject to applicable sanctions.
3.8 Insurance
Neon Cloud maintains appropriate insurance coverage including professional liability (errors and omissions), cyber liability, and general commercial liability insurance. Certificates of insurance are available upon request to enterprise customers under NDA.
3.9 Subprocessors
Neon Cloud engages a limited number of subprocessors for payment processing, email delivery, analytics, and customer support. A current list of subprocessors is maintained at neoncloud.com/legal/subprocessors and updated with at least thirty (30) days' notice before adding a new subprocessor.
Customers who object to a new subprocessor may terminate the affected services without penalty.
3.10 Changes to Legal Policy
This Legal Policy may be updated as regulatory requirements evolve. Material changes will be communicated via email and published on neoncloud.com/legal with at least thirty (30) days' advance notice.