Compliance & Export Control

Several of Al Mahdi Fast Technologies Pvt. Ltd.’s solutions — including cybersecurity and penetration testing tooling, digital forensics systems, and custom firewall infrastructure — may be classified as dual-use or controlled technology under the export control and sanctions regimes of the jurisdictions in which we and our clients operate. Availability of any given capability is subject to applicable export control clearance and end-use verification.

Before any engagement involving controlled capabilities proceeds beyond preliminary scoping, we conduct end-user and end-use due diligence consistent with applicable export control and sanctions requirements. We reserve the right to decline, pause, or terminate an engagement where such due diligence cannot be satisfactorily completed.

AftPak does not knowingly engage with individuals, organizations, or jurisdictions subject to applicable international sanctions. Prospective clients may be screened against relevant sanctions and denied-party lists as part of our onboarding process.

For engagements involving air-gapped, on-premise, or sovereign GovCloud deployment environments, additional contractual and technical controls — including data residency commitments and restricted personnel access — are documented in the applicable Statement of Work.

Depending on engagement scope, our systems are engineered to support alignment with recognized frameworks such as ISO/IEC 27001, NIST SP 800-53, GDPR, PCI-DSS, and applicable national data sovereignty requirements. Formal certification, where required, is scoped and documented per engagement.

If you believe you have discovered a security vulnerability affecting AftPak systems or this website, please report it confidentially to inquiries@aftpak.com rather than disclosing it publicly. We will acknowledge reports in good faith within a reasonable timeframe.

For questions regarding export eligibility or compliance requirements for a specific engagement, contact our team through the contact page before submitting a detailed requirement intake.