India's Digital Personal Data Protection Act

DPDPA is on
the horizon.

All core operational obligations — consent mechanisms, Data Fiduciary requirements, and penalties — take full effect on:

Full effect 13 May 2027 The clock to operational compliance is already running.

Where most companies are today

Companies are currently engaging legal advisors as the first step

Deciding data purposes

Establishing consent grounds

Drafting RoPAs

Privacy impact assessments

But the operational processes aren't in place yet.

Advisory decides what compliance should look like. It doesn't run it — or keep running it.

Discover the data inventory

Find every system and store where personal data lives.

Record processing & legal basis

Log each activity and the lawful basis it relies on.

Maintain a record of consent

Keep a durable, auditable history of what was agreed.

Re-consent existing customers

Reach out to current data principals for updated consent.

Respond to data-principal requests

Handle access, correction, and erasure within the clock.

Report status to leadership

Give the board a clear, current view of compliance.

And do all of it — regularly.

An elegant, simple solution you self-host in your own environment.

Your data never leaves your own environment.

No monthly bill that scales with your data.

Pay once to deploy, then support fees only.

Legacy solutions

DPDPA CMS Self-hosted

We're building to replace expensive tools like OneTrust.

See DPDPA CMS running before the 2027 deadline. Tell us a little about your organisation and we'll set up a preview.

Self-hosted in your own environment One-time setup, support fees only Purpose-built for the DPDPA