About Tata 1mg
Tata 1mg is India's most trusted integrated healthcare platform. They serve over 40 million monthly users across e-pharmacy, diagnostics, doctor consultations, and a rapidly expanding network of physical stores.
Backed by the Tata Group and operating at ₹2,392 crore in annual revenue, Tata 1mg is not just scaling a business. It is reshaping how India accesses healthcare.
At that scale, the data handled every day, prescriptions, diagnostic reports, health histories, Aadhaar-linked records, carries a weight of responsibility that demands security of the highest order.
The Pressure Point
- New stores opening continuously. Cloud infrastructure expanding to match.
- A user base of 40 million people who trust the platform with their most sensitive health data: prescriptions, diagnostic results, complete health histories.
- A regulatory environment (ISO 27001, DPDP) that requires the security posture to keep pace with every dimension of that growth.
- They needed a security partner who could operate at that speed, at that scale, without ever becoming a bottleneck.
What They Needed
Security that scales as fast as the business. Every new store connected securely the moment it opens. Every cloud workload protected. Every endpoint covered. Every employee trained.
"Security at Tata 1mg has to be enterprise-grade at startup speed. Every store secured before it opens. Every workload protected before it goes live."
And a strategic security perspective at leadership level, not just implementation, but advice that shapes decisions before they become risks.
How NxgSecure Delivers
NxgSecure operates across every layer of Tata 1mg's security environment: as implementers, as managed service providers, and as strategic advisors to the founders and leadership team.
NxgSecure is implementing SD-WAN across all stores and warehouses, moving them off the public internet entirely into a private, secured network. When a new store opens, it connects securely. The attack surface shrinks as the store network grows.
Tata 1mg runs complex cloud infrastructure. NxgSecure secures it at every level: containers, EC2 workloads, and cloud clusters, ensuring the infrastructure powering 40 million users is protected continuously, not just at deployment.
EDR deployed across all endpoints. Every device covered, monitored, and protected in real time.
SASE implemented with SWG, CASB, web DLP, and ZTNA. Every user has secure access from anywhere, while data and applications remain under control regardless of where work happens.
Email protected against phishing, spoofing, and impersonation. DLP on email ensures sensitive health data does not leave the organisation through the channel most often overlooked.
Certified under ISO 27001, now entering year two of surveillance. Every control was designed for DPDP compliance simultaneously. One implementation. Multiple obligations met.
"At our scale and pace of growth, we need security partners who bring deep specialisation and broad perspective — not just execution. NxgSecure advises us the way the best partners do: with fresh eyes, best practices drawn from across industries, and a point of view we can trust. That is rare."Gaurav Agarwal, Co-founder & CTO · Tata 1mg
Bringing NXG-360 to Tata 1mg
NxgSecure is bringing its NXG-360 unified security portal to Tata 1mg. When live, it will give their team complete, real-time visibility across every layer of their security environment.
Every security control, every cloud workload, every endpoint, every compliance status, aggregated into a single view. No blind spots. No guesswork.
Controls watched in real time across both security and compliance dimensions. Gaps surfaced before they become findings. Not monitored once a year, but monitored every day.
Audit evidence gathered continuously and automatically. When a regulator or auditor asks, the evidence is already there: current, organised, and complete.
NxgSecure meets with Tata 1mg's leadership regularly throughout the year. Posture reviewed. Priorities set. Security decisions made with full awareness of the current threat landscape.
We know this environment.
NxgSecure has secured healthcare platforms managing millions of patient records across pharmacy, diagnostics, and clinical services. We understand the data sensitivity, the regulatory obligations, and the pace of growth that comes with India's digital health transformation.
What It Delivers
Tata 1mg continues to scale, and security scales with it. Every new store secured before it opens. Every new cloud workload protected before it goes live. Every employee trained before they become a risk.
"NxgSecure advises us the way the best partners do: with fresh eyes, best practices drawn from across industries, and a point of view we can trust. That is rare." — Gaurav Agarwal, Co-founder & CTO · Tata 1mg
What NxgSecure Delivers
What runs for Tata 1mg
- SD-WAN: private store & warehouse network
- Endpoint detection and response
- SASE (SWG · CASB · ZTNA · Web DLP)
- Email security and email DLP
- Cloud security (containers · EC2 · clusters)
- VAPT
- Unified security & compliance visibility
- Continuous controls monitoring
- Automated evidence collection
- Security awareness training
- Phishing simulation
- ISO 27001 certified · Year 2 surveillance
- DPDP advisory and control implementation
- Management review and strategic advisory