HomeUse Cases ApplicationsMethodology AboutContact
Environmental · Social · Governance

ESG Commitment —
returning value
to those who need it most.

ARRC Global — the organisation behind VIGIL — believes that the standards we ask of others must be standards we hold ourselves to. This is our ESG commitment: not a compliance exercise, but a statement of how we operate.

Founding Principle

Resilience is not only a service we provide. It is a value we carry — in how we build VIGIL, how we engage with clients, and how we return value to communities that have been underserved by the security and risk industries. The most sophisticated intelligence tools should not be available only to those with the largest budgets.

E

Environmental

  • Data hosted on Hetzner (Germany) — one of Europe's most energy-efficient hosting providers, powered by renewable energy
  • Remote-first operations — reduced physical office footprint and business travel
  • Paperless operations — all documentation, contracts, and client deliverables are digital
  • No on-site hardware — cloud-native infrastructure reduces embodied carbon of physical server estates
  • Climate risk is a core assessment domain within the VIGIL methodology — we take it seriously in our product because we take it seriously in our operations
S

Social

  • Pro-bono security assessments for NGOs, civil society organisations, and humanitarian operations working in high-risk environments
  • Open knowledge sharing — ARRC Global publishes security and resilience guidance freely accessible to organisations regardless of budget
  • Inclusive hiring — ARRC Global actively recruits from underrepresented backgrounds in the security and technology sectors
  • Principal-led practice — clients engage directly with senior practitioners, not a pyramid of junior staff
  • VIGIL is designed to democratise access to sophisticated site intelligence — capability that was previously available only to the largest global organisations
G

Governance

  • All governance policies published publicly — Privacy Policy, Terms of Use, AI Governance Policy, Responsible Disclosure, and all internal governance documents available on request
  • AI governance is explicit, documented, and auditable — no black-box processing, no undisclosed AI
  • ISO 27001 certification in progress — external validation of information security governance
  • DPDP Act and GDPR aligned — data protection governance meets or exceeds applicable legal standards
  • Client data belongs to the client — no repurposing, no AI training on client data, no exceptions
  • Conflict of interest policy — ARRC Global does not hold equity positions in clients it assesses through VIGIL

ARRC Global was founded on a conviction that the gap between organisations that can afford world-class security intelligence and those that cannot is itself a resilience risk — for businesses, for communities, and for the critical infrastructure that societies depend on.

VIGIL exists in part to close that gap. The platform is priced and structured to be accessible to organisations beyond the Fortune 500. The methodology is documented and explainable — not a proprietary black box that creates vendor dependency. The AI architecture is in-house — not because it was cheaper, but because it was the right thing to do for clients who cannot afford to have their sensitive intelligence data processed by third parties.

We commit to reviewing and updating this ESG statement annually. We commit to honest reporting — not aspirational language without accountability. And we commit to the proposition that the security and resilience of the most vulnerable is as important as the security of the most powerful.

Policy OwnerAnshin Risk and Resilience Consulting Pvt. Ltd.
Effective01 July 2026
Review CycleAnnual
Contactcontact@arrcglobal.com