PensionBox Trust Center
We are independently audited and ISO 27001 certified. Your pension and NPS data are protected by a globally benchmarked Information Security Management System, which is continuously monitored and verifiable.
ISO/IEC 27001:2022
Information Security Management Systems
Issued by INTERCERT INC. · IAF-accredited (IAS, MSCB-121)
Certified Entity:
PensionBox (Legal name: Asht Capital Private Limited)
Certificate No:
IC-IS-2604321
Standard:
ISO/IEC 27001:2022
Valid Until:
April 28, 2029
This certificate illustration is just for visual representation purpose doesn’t resemble the original certificate
Scope of Certification
What our ISMS covers?
The Information Security Management System at Asht Capital Private Limited applies to PensionBox, a pension and NPS management platform hosted as a SaaS platform for their clients with the Support Function of IT Infrastructure, Data Privacy, IT & Data Security, Human Resources, & Legal
Penetration Testing (VAPT)
Beyond ISO 27001, our web application is regularly tested by independent security researchers using both manual and automated techniques.
Vulnerability Assessment & Penetration Testing
Conducted by Riversys Technologies Private Limited (Scrut Automation)
Certified Entity:
PensionBox (Legal name: Asht Capital Private Limited)
Assessment Type
Web Application VAPT
Methodology
OWASP Top 10 · Manual + Automated
Valid Until
February 04, 2027
Coverage
Authenticated + Unauthenticated
Issued by INTERCERT INC. · IAF-accredited (IAS, MSCB-121)
Full Report available under NDA
Request Full VAPT ReportThis certificate illustration is just for visual representation purpose doesn’t resemble the original certificate
How we keep your data safe
ISO 27001 is the foundation. These are the controls and practices that sit on top of it.
ISO/IEC 27001:2022 Certified
Independently audited by INTERCERT INC. (IAF-accredited via IAS) under the latest 2022 standard. Covers all 93 Annex A controls.
Data Encryption
All data is encrypted at rest using AES-256 and in transit via TLS 1.2+. Sensitive fields are tokenized at the application layer.
Pension Agent under PFRDA POP
PensionBox operates as a registered Pension Agent under Zerodha Broking Limited (PFRDA Approved POP). NPS contributions flow through PFRDA’s regulated framework, with assets held by NPS Trust.
Data Residency in India
All customer data is stored and processed within Indian data centers (AWS ap-south-1, Mumbai), aligned with DPDPA expectations.
Access Controls & Audit
Role-based access, multi-factor authentication, principle of least privilege, and continuous logging across all production systems.
Incident Response
Documented incident response and business continuity plans, with annual tabletop exercises and management review of every event.
Verify our certification independently
Don’t take our word for it. Our certification is listed in the IAF (International Accreditation Forum) global database, which is the same registry used by enterprise security teams worldwide.
2,00,000+ Stories
Hope they inspires you as well.
their NPS stories for a golden retirement.
PensionBox simplifies the National Pension System(NPS), the government's pension scheme for private employees both for retail users and HRs/companies.
If you don’t have an NPS account, you can simply open your pension account within 2 minutes and if you have NPS PRAN already, you will be able track, invest and manage everything free of charge with best user experience.
We never touch or hold your money directly, your investments go safely to your chosen pension fund through approved channels.
We are built with Zerodha as POP , ensuring transparency, data security, and peace of mind. Your retirement savings are protected by regulation and secured by technology.
That’s why, PensionBox brings transparency, zero charges, timely support and freedom to select any pension fund so that you get the best experience investing in NPS & be better future ready.
That’s not it, we help you & your company together to maximise contribution and tax savings with minimal charges & best user experience.
If you are an existing zerodha user then you get a fast login or sign up using kite ID.
Once you are onboarded with kite ID, you get free access to
- Open NPS in 2 minutes
- Track existing NPS
- POP shift or CRA shifting
- Invest in one time or create SIP in NPS
- Withdraw NPS requests & instant withdraw tier 2
- Create your dream retirement plan
- Open NPS Vatsalya for your kid
- Share with HR (To unlock more tax benefits)
- Employer Contribution:
- Contributions made by your employer to your NPS account are tax-free up to 14% of your basic salary under Section 80CCD(2). Do connect us with your HR to enable this for you.
Tax Benefits in Old Tax Regime - Self-Contribution:
- Deduction up to ₹1.5 lakh under Section 80C.
- Additional deduction of ₹50,000 under Section 80CCD(1B) — exclusive to NPS investments!
- This allows you to claim a total deduction of up to ₹2 lakh every year on your NPS contributions.
- Employer Contribution:
- Contributions made by your employer to your NPS account are tax-free up to 10% of your basic salary (Basic + DA) under Section 80CCD(2). Do connect us with your HR to enable this for you.
- This is over and above your personal deduction limits, giving you extra tax efficiency.
Feel free to book a free call to learn more about NPS, NPS Vatsalya, Corporate NPS & PensionBox or contact the support team.
