Meet the founders.

A note from Karan Bhandari.

I have been working in offensive and defensive security since 2015, and the years since have taken me through ISO 27001 inside the Bank of Montreal’s CISO office, sovereign security architecture for a department of the Netherlands government, ransomware response for regional enterprises, and board-level risk work across six countries.

For a good part of that time I was the person on the other side of the table, reading a company’s security before the regulator did, before the deal closed, before the investor’s technical team started asking questions. And what undoes companies in that room is almost never a missing control. It is that the policy says one thing, the systems do another, and the person answering in the meeting gives a third version, not because anyone is lying but because nobody inside had ever read all of it together in the order a reviewer reads it.

Birchlogic exists so that the first person to read your security that way is on your side of the table.

— Karan Bhandari, Co-founder · Delhi and Singapore

• Founding partner, the world's first Sustainable AI Centre of Excellence — The Indian Express, 2026
• India's first Sustainable IT Centre of Excellence — The Times of India, 2025
• Speaker and exhibitor, India AI Summit — India AI Summit, 2026

CEH at fifteen, one of the youngest in India at the time. That dateline matters less as a credential than as a runway: it is the start of a decade spent inside other people’s security programmes rather than beside them.

ISO 27001 inside the Bank of Montreal’s CISO office. Sovereign security architecture for a department of the Netherlands government. Ransomware response for regional enterprises. Board-level risk work across six countries.

What all of it taught him is the reader’s side of the table: how a regulator, an auditor or an acquirer actually reads a company, in what order, and which seam they find first. That is the discipline the firm is built on.