Security & Compliance

DPDP Act compliance

India's Digital Personal Data Protection Act, applied to systems you already run.

Typical duration
3–8 weeks
Scope
Fixed and written before you sign
Team
Delivered by the principal

Who it is for

Any Indian business handling personal data.

Everything below is in the scope document, written and priced before anything starts. If something you need is not on this list, say so and it goes in the quote — or we tell you it does not belong in this engagement.

  • Personal data inventory and processing-purpose mapping
  • Consent architecture and notice design
  • Data principal rights — access, correction and erasure — implemented, not just promised
  • Breach notification process and retention schedule
  • Contractual updates for your processors

How every Security & Compliance engagement runs →

Next step

Thirty minutes on whether this is the right engagement.

If a different service on this list fits better, or if you do not need us at all, that is what the call will conclude.