Security at 24Library

All data transmitted between users and 24Library is protected using HTTPS (SSL/TLS) encryption. Sensitive information stored in our systems is encrypted at rest using industry-standard algorithms, ensuring data remains unreadable to unauthorised parties.

We operate on reliable cloud infrastructure that follows industry-standard security practices — including network firewalls, continuous monitoring, and regular security updates — ensuring high availability and protection against common threats.

• Secure, hardened server environments
• Network-level firewalls and DDoS protection
• Continuous infrastructure monitoring
• Regular security patching and updates

Strict role-based access controls ensure that sensitive information is accessible only to authorised individuals. Libraries retain full control over their own member data.

• Role-based access control (RBAC)
• Restricted administrative privileges
• Access limited to operational necessity
• Internal access audit logging

Libraries and organisations using 24Library retain full ownership of their data. 24Library acts solely as a technology platform provider and does not sell, rent, or share member data with third parties for any marketing or commercial purpose.

Some libraries collect identity verification information such as government IDs or Aadhaar details from their members. When such information is stored on the platform:

• Stored in encrypted, secure cloud storage
• Access restricted to authorised administrators only
• Used strictly for operational and verification purposes
• Compliant with IT (SPDI) Rules, 2011

To ensure data safety and availability, 24Library maintains automated backups, redundant infrastructure, and disaster recovery mechanisms — protecting data from accidental loss or system failures.

• Automated daily backups
• Geographically distributed backup storage
• Redundant infrastructure for high availability
• Tested disaster recovery procedures

Our platform is continuously monitored to detect and prevent suspicious activity. Security patches are applied regularly to maintain a safe environment for all libraries and their members.

In the unlikely event of a data breach, we will promptly investigate the incident and notify affected library administrators and, where required, the relevant regulatory authorities — in accordance with the Information Technology Act, 2000.