An LMS hosted in India, with backups that stay in India.
edzlms keeps your learner data, training records and every backup on Indian infrastructure, on AWS Mumbai or India-based providers. It's built in Bengaluru, ISO 27001 certified, and ready for the DPDP Rules as they commence through 2027.
- AWS Mumbai hosting
- In-country backups
- ISO 27001 certified
- Platform
- edzlms
- Hosting
- AWS Mumbai · India-based providers
- Backups
- 6-hourly, encrypted, kept in India
- Encryption
- At rest and in transit
- Certification
- ISO 27001
- Uptime
- 99.97% (12-month average)
- Company
- Edzlearn Services Pvt. Ltd., Bengaluru
Which LMS is hosted in India?
India hosting, fact by fact
The details your IT, legal and compliance teams will ask for.
| What | edzlms in India |
|---|---|
| Hosting region | India: AWS Mumbai and other India-based providers |
| Backups | Kept in India, never copied abroad |
| Certification | ISO 27001 certified |
| Encryption | Data encrypted at rest and in transit |
| Access | Role-based access, single sign-on, single-device login |
| Uptime | 99.97% (12-month average) |
| Made in | Bengaluru, India, by Edzlearn Services Pvt. Ltd. |
What the DPDP Rules mean for your LMS
Your LMS holds names, emails, employee IDs, scores and certificates. That's personal data under the Digital Personal Data Protection Act, 2023. Here is when the Rules apply.
13 Nov 2025
DPDP Rules notified. Definitions and the Data Protection Board take effect on publication.
Nov 2026
Consent Managers. Registration of Consent Managers begins, one year after publication.
May 2027
Main obligations. Notice, security safeguards, retention, breach intimation and data principal rights commence.
India hosting isn't mandatory
The DPDP Act allows transfers abroad except to countries the government restricts. Many companies still choose India hosting so the data, and the questions about it, stay in one jurisdiction.
You decide, we process
Usually your organisation is the Data Fiduciary and the LMS provider processes data on your behalf. Your contract sets out who does what.
72 hours to report
Rule 7 requires affected people to be told without delay and a detailed report to the Data Protection Board within 72 hours.
Questions to ask any LMS vendor
Ask every vendor on your shortlist these questions. Here's how edzlms answers.
| Ask | edzlms |
|---|---|
| Where exactly is learner data hosted, and where are backups kept? | India on AWS Mumbai or India-based providers. Backups stay in India. |
| Is the provider security-certified? | Yes, ISO 27001 certified. |
| Is data encrypted? | Yes, at rest and in transit. |
| Who can see learner records? | Role-based access, with SSO to your identity provider. |
| How are leavers handled? | HRMS sync deactivates access on exit while keeping the training record for audit. |
| What happens if there is a breach? | Ask for the incident process in writing. With edzlms, how we notify you is set out in your contract. |
Built for how Indian teams train
Indian languages
Gelato AI roleplay in Hindi, Bengali, Marathi, Tamil, Telugu, Kannada, Odia and more. Frontline videos in Hindi and Hinglish.
WhatsApp & SMS reminders
Reminders reach frontline staff on the phone they actually use, and managers can nudge their own team.
HRMS sync
Joiners, movers and leavers update training automatically from Darwinbox, SAP SuccessFactors, Workday, Zoho People and others.
Teams abroad? Pick their region too
edzlms also runs in the EU (Hetzner, AWS Milan) and North America (AWS Canada Central, AWS US East). Each site's backups stay in its own region.
India hosting & DPDP: common questions
Is there an LMS hosted in India?
Yes. edzlms, from Edzlearn Services Private Limited in Bengaluru, can be hosted entirely in India on AWS Mumbai or other India-based providers, with every backup kept in India too. EDZLMS is ISO 27001 certified.
Does the DPDP Act require learner data to stay in India?
Not as a general rule. Under the DPDP Act, personal data can be transferred outside India except to countries the Central Government restricts by notification. Some sectors, such as payments, have their own localisation rules. Many organisations still choose India hosting because it keeps the data, and the questions about it, in one jurisdiction.
When do the DPDP Rules apply?
The DPDP Rules, 2025 were notified on 13 November 2025 and commence in phases. Registration of Consent Managers follows one year after publication, in November 2026. The substantive obligations, such as notice, security safeguards, breach intimation and data principal rights, follow eighteen months after publication, in May 2027.
Who is responsible for learner data under DPDP, us or the LMS vendor?
Usually the organisation that decides why and how learner data is processed is the Data Fiduciary, and the LMS provider processes data on its behalf. The exact roles depend on the contract and the facts, so confirm them with your legal team.
How quickly must a data breach be reported under the DPDP Rules?
Rule 7 requires affected Data Principals to be informed without delay and a detailed report to be sent to the Data Protection Board within 72 hours, unless the Board allows more time.
Can edzlms also host outside India?
Yes. Customers choose India (AWS Mumbai and India-based providers), the EU (Hetzner or AWS Milan) or North America (AWS Canada Central and AWS US East). Backups always stay in the same region as the site.
Is this legal advice?
No. This page is general information about the DPDP Act and Rules. Take advice from a qualified professional on your own circumstances.
Keep your training data in India.
See edzlms hosted on Indian infrastructure, with your own content, in a 45-minute demo.
Prefer email? Write to marketing@edzlms.com