Deccan AI

Deccan AI is a specialist AI data company that manages sensitive training and evaluation data for frontier AI labs and enterprise clients. Operating across the US, Hyderabad, and Bengaluru, the company works within stringent compliance frameworks — including SOC 2, ISO 27001, and GDPR — and counts organisations like Google and Snowflake among its enterprise partners. 

Following a $25M Series A, Deccan AI set out to build an identity and endpoint security foundation capable of matching the trust demands of global frontier AI development.

Device security and identity governance aren’t optional for us — they’re foundational. A single compromised device or over-privileged account could expose sensitive model development assets. Getting this right isn’t a checkbox; it’s the foundation of every client relationship we have.

— Vinod, Senior IT Infra Engineer, Deccan AI

Managing Device Identity & User Access Across a Distributed AI Workforce — Without Dropping Compliance

Managing Device Identity & User Access Across a Distributed AI Workforce — Without Dropping Compliance

Before engaging NetNXT, Deccan AI’s IT and security operations were struggling to keep pace with its growth. Here’s what the team was dealing with:

1. No unified visibility across three locations: 

Teams in the US, Hyderabad, and Bengaluru had no single view of device compliance, access policies, or endpoint health. Each location operated in isolation.

2. Manual onboarding and offboarding creating real risk: 

Contractor access, role changes, and employee exits were managed by hand — leading to orphaned accounts, delayed deprovisioning, and access drift across SOC 2 and ISO 27001 scopes.

3. No role-based access policy engine: 

Annotators, ML researchers, domain experts, and contractors each needed different access profiles. Without a centralized IAM system, enforcing least-privilege was inconsistent and hard to audit.

4. Audit readiness was a scramble, not a system: 

There was no automated, continuous audit trail. Producing compliance evidence for ISO 27001 or GDPR review cycles meant pulling data from multiple places — manually.

5. Cross-platform endpoint diversity: 

The device fleet spanned Windows, macOS, Linux, and mobile. Legacy tools couldn’t enforce consistent security baselines across all of them.

One Platform, One Partner: JumpCloud Deployed by NetNXT

After evaluating their options, Deccan AI chose JumpCloud for unified device and identity management — and NetNXT as the implementation and managed services partner to make it real. JumpCloud’s cloud-native architecture gave Deccan AI a single platform for directory services, SSO, MFA, cross-platform device management, and compliance logging — without stitching together a patchwork of tools. 

NetNXT brought deep knowledge of both the technology and the compliance environment, understanding what was at stake from the very first conversation.

The Deployment Approach

NetNXT handled the rollout end-to-end, in carefully staged phases:

1. Cross-platform policy design — 

Unified security policies built for Windows, macOS, Linux, and mobile — enforced consistently from one console.

2. Role-specific onboarding profiles — 

Distinct access profiles for annotators, ML researchers, domain experts, and contractors, each scoped to least-privilege.

3. SSO and directory consolidation — 

JumpCloud’s cloud directory became the single source of truth. SSO was integrated across all SAML and OIDC-based applications.

4. MFA enforcement at scale — 

Multi-factor authentication rolled out across the entire user base, closing a critical exposure point.

5. Centralized audit logging activated — 

Continuous, evidence-ready audit trails for SOC 2, ISO 27001, and GDPR — always on, always current.

All of this happened without disrupting a single live data pipeline.

NetNXT didn’t just implement JumpCloud — they understood our environment, our compliance obligations, and our pace of growth. The rollout was staged, precise, and completely seamless. That’s the kind of partner you want when the stakes are this high.

— Vinod, Senior IT Infra Engineer, Deccan AI

The Results: Visibility, Control, and Compliance — At Scale

• Full endpoint visibility — all devices across three countries enrolled, monitored, and policy-enforced from one console.

• Automated user lifecycle management — onboarding to offboarding, streamlined and fully auditable.

• Least-privilege access by policy — not guesswork. Every role, every permission, enforced centrally.

• Always-on audit readiness — continuous compliance evidence for ISO 27001, SOC 2, and GDPR.

• Lower administrative overhead — IT and security teams freed from manual, repetitive tasks.

• Stronger enterprise trust — a measurable competitive advantage with clients like Google and Snowflake.

For Deccan AI, security isn’t just infrastructure — it’s a competitive signal. With JumpCloud as the platform and NetNXT as the partner, the company now has the identity and device management foundation to prove it to any enterprise client, at any scale.

Is Your Growing AI or Tech Company Struggling with Identity, Device, and Compliance Management?

Don’t wait for an audit or a breach to find out your controls aren’t keeping up. NetNXT will assess your environment, recommend the right solution, and deploy it — without disrupting your operations.

➡  Book a Free Security Assessment →