Hello team dhan, You are building a fine product and there is a long way to go before you reach a product you actually wanted to develop. Keep evolving.
But me being a infosec guy want to have a few questions answered from the founder himself, as to me an ethical and progessive founder gives a go ahead while using unknown products. My quick questions :
Does dhan stores aadhar info other than address and DOB? (in short what exactly dhan stores)
What is dhan doing on data security? (as another broker ‘upstox’ faced massive data breach earlier this year)
Do you have any focused data security team?
Do we have a bug bounty program open?
What are your views on open source?
Finally, what would you rate yourself based on ethics on a 10 point scale?
Yes, as you said, we are new and building fast. Let me come to your questions directly
Nope, we don’t save. And we are not allowed to save these details by regulation, none of the stock brokers or SEBI regulated intermediaries are permitted.
Security and Safety is an ongoing process, there is no end to this. If you are in infosec, you know this much better than possibly I would.
Current engg team is focussed on that, we are building this as it’s important. Also engaged with infosec focussed security partners who assess our platform independently. As a stock broker, we are subject to security audits by exchanges.
No, but we will have this. Set ups a good practice. One of our users shared few observations with us, we closed and send a nice gift as well
Is it possible to build without open source these days?
