Acceptable Use Policy
Last updated: 25 October 2026 · Version 1.0 · Edition: DigiSurvey Enterprise (Mumbai)
1. Who this applies to
Every person or system acting under an enterprise account on digisurvey.co.in — insurance-company employees, independent IRDAI-licensed Surveyors & Loss Assessors, support contractors, and any API client authorised by an enterprise account.
2. Surveyor conduct
- Act within your IRDAI licence. Do not take on a class of loss (motor OD, motor TP, SR 1 / 2 / 3, large-loss categories) outside the category of your current IRDAI licence. Do not sign a report for a class you are not authorised for. Do not share your licence credentials with another person, inside or outside your firm.
- Attend the site in person where the appointment requires it. Do not stage photographs. Do not reuse photographs from another case. Do not disable camera-timestamp or GPS tagging to misrepresent when or where a survey happened. Spot and reinspection categories exist to protect insureds; do not downgrade them for convenience.
- Respect the insured. Introduce yourself. Explain what you are doing. Ask permission before photographing the driving licence, the policy copy, the ID of a bystander, or anything containing a face other than the vehicle’s occupants. Give the insured the sign-off page and the right to add remarks.
- Keep the report truthful. Record what you observed, not what the insurer or the garage “expected”. Use remarks to disagree, respectfully, with documents you cannot verify. Do not round, pad or shave figures to meet an external target. Your IRDAI licence depends on this; so does the trust of every insured who comes after.
3. Protecting insured data
- Minimum necessary. Collect only the data you need for the current claim. Do not photograph documents that are not part of the loss (bank statements, prior claim files, unrelated identity cards) just because they happen to be at the site.
- No off-platform copies. Do not export photographs, OCR text or the final report into personal cloud drives, WhatsApp Business accounts, chat exports, or unencrypted USB drives. Share only through DigiSurvey or your insurer’s approved portal.
- Device hygiene. Keep your login device locked. Use the device’s own biometric lock on top of the DigiSurvey password. Sign out on a shared device. Report a lost or stolen device within 24 hours to security@digitaliiisla.co.in so we can revoke that device’s sessions.
- Right to erasure. Where an insured validly exercises a right to erasure under the DPDPA, do not resist. Route the request through your firm’s DPO and, in parallel, email grievance@digitaliiisla.co.in so the platform can mirror the deletion once legal retention allows.
4. Hard prohibitions
No scraping
No automated harvesting of other users’ data, no crawling of signed URLs, no reverse engineering of the API beyond what your enterprise agreement authorises.
No fraud assistance
No fabrication of a claim, no post-dating of a loss, no reuse of photographs across cases, no concealment of a prior survey report.
No shared accounts
One licensed surveyor → one DigiSurvey account. No sharing of credentials with assistants, interns or office staff.
No illegal content
No content prohibited under Indian law — CSAM, non-consensual intimate imagery, hate speech, criminal defamation, pirated material of any kind.
No security probing without consent
No pentest, vulnerability scan, SQL injection probe, auth bypass test or similar activity against the production environment without prior written agreement from Digitaliiisla security. See Responsible Disclosure.
No regulator deception
No altering of a signed report’s PDF, no tampering with timestamps or GPS, no uploading of a signed PDF generated outside the platform to make it appear generated inside.
5. Content you may upload
- What belongs here. Photographs of the surveyed vehicle, the site, the damage, the odometer, the number plates, the VIN plate; the policy copy, RC book, driving licence of the driver at the time of loss, and the cheque leaf for salvage buyer payment where applicable; the completed survey report and its annexures.
- What does not belong here. Personal media unrelated to the claim; photographs of children unless they are part of the loss evidence (seat damage after a child restraint, for example); political, religious or hateful material; anything that would embarrass or endanger an insured if it leaked.
- IRDAI-aligned retention. Do not delete survey evidence prematurely. The platform retains survey artefacts per the applicable DPA and, by default, for seven years. If you believe a specific artefact must be deleted earlier (for example, a photograph that captured an unrelated bystander), raise it with your insurer and, in parallel, with Digitaliiisla.
6. Reporting abuse
Suspected AUP violations — by another surveyor, by an insurer-side user, by an attacker, or by an automated client — should be reported to security@digitaliiisla.co.in. Grievances under the DPDPA 2023 go to our Grievance Officer. We do not retaliate against good-faith reporters.
7. Consequences
- Warning. First-time, low-severity breaches may be addressed with a written warning to the user and to the Customer admin.
- Suspension. A suspended account cannot sign in or upload new material. Existing reports stay visible to the owning insurer.
- Termination. Repeated or serious breaches — especially fraud or scraping — lead to termination of the user account, and, where applicable, of the Customer agreement.
- Regulator referral. We will cooperate with lawful orders from IRDAI, the Data Protection Board of India, and Indian law-enforcement authorities. In serious cases we may make a referral on our own initiative.
- Civil and criminal consequences. Nothing in this AUP limits the Customer’s own liability under the Agreement, the IPC, the IT Act or the DPDPA.
8. Changes
We may update this AUP as the regulatory environment and the platform evolve. Material changes are notified 15 days in advance to Customer billing contacts. The current version is always at this URL.