DPDP Act Compliance · Flagship
Every Indian business now has a data protection law. Most aren't ready. We make you ready.
The Digital Personal Data Protection Act applies to every organisation processing personal data in India - with penalties up to ₹250 crore. We audit, implement, and then stay on as your Virtual DPO. Engineers doing compliance, not consultants leaving PDFs.
Packages
Three ways in - audit, implement, or retain.
Indicative starting prices; the exact quote depends on systems, data volumes and vendors involved. No surprise billing - everything is scoped in writing first.
DPDP Gap Audit
₹75,000+
one-time · ~2 weeks
Know exactly where you stand before you spend on fixes.
- Data inventory & mapping workshop
- Review of forms, apps, consent flows & notices
- Vendor and data-sharing exposure review
- Security safeguards assessment
- Prioritised gap report with effort estimates
- Board/management readout
Implementation Package
₹3,00,000+
one-time · 6-12 weeks
We close the gaps - engineering included, not just advice.
- Everything in Gap Audit
- Privacy notices & consent flows built into your product
- Data principal rights workflow (access, correction, erasure)
- Grievance redressal setup with timelines
- Vendor contracts & processor agreements
- Breach response playbook + one drill
- Staff training session
Virtual DPO Retainer
₹25,000+/mo
ongoing · annual
Stay compliant as rules, vendors and your product change.
- Named privacy officer for your organisation
- Quarterly compliance reviews & evidence upkeep
- New feature / vendor privacy reviews
- Breach response support when it matters
- Regulatory update briefings
- Priority incident response access
How it works
From first call to compliant, in five steps.
01 · Discover
Free consult: what data you hold, where the law bites you, honest scope.
02 · Audit
Data mapping, consent review, vendor exposure - a prioritised gap report.
03 · Implement
Notices, consent flows, rights workflows, contracts - built, not advised.
04 · Prove
Evidence pack, breach drill, staff training - ready for scrutiny.
05 · Retain
Virtual DPO keeps you compliant as rules and your product evolve.
Who this is for
If you hold personal data, this is for you.
E-commerce and D2C brands with customer databases. Hospitals, clinics and diagnostics with patient records. Schools and edtech with children's data - where the Act is strictest. NBFCs and fintechs layering DPDP on top of RBI norms. HR and staffing firms holding candidate files. SaaS products with Indian users. And government departments and PSUs, where we combine this with GIGW compliance.
Not sure where you stand? Our free readiness check gives you a scored answer in ten minutes - run it now, no signup.
Free download
The DPDP Compliance Roadmap (PDF)
A plain-language, step-by-step roadmap from “where do we even start” to audit-ready - with a 90-day plan and the checklist our own team uses.
₹250 crore is the penalty. A consult call is free.
Thirty minutes with our team and you'll know exactly which obligations apply to you and what closing them would take. No pressure, no jargon.