TWO DEADLINES ARE ALREADY RUNNING

You have the legal opinion. Do your systems actually do what it says?

We are an engineering firm, not a policy shop. We build consent, retention, erasure, breach reporting and AI oversight into production, then stay on to keep the evidence current.

Get My DPDP Readiness Score
Engineering since 2016
Hosted in India
7+ patents filed
Nasscom contributor

Data Protection

India DPDP · consent manager Nov 2026 · full May 2027

Data inventory and mapping, consent architecture, retention and erasure automation, 72-hour breach path, vendor contract controls.

See how we do it

AI Governance

EU AI Act · transparency obligations from Aug 2026

Model and use-case inventory, risk classification, technical documentation, human oversight design, event logging and drift monitoring.

See how we do it
Access logs, data lineage and a DPDP evidence register open side by side on three screens
Access logs, lineage and the evidence register, produced as the system runs.

WHERE THE CLOCK ACTUALLY IS

Most people have the DPDP date wrong. They are planning for May 2027. The Board can start levying penalties well before that.

13 NOVEMBER 2026

36days away

Rule 4 commences. Consent Manager registration opens, and the Act’s penalty and appeal provisions become operative. An inquiry opened after this date has teeth.

13 MAY 2027

217days away

Full substantive compliance. Notice, consent, data principal rights, retention, breach process, cross-border transfer and security safeguards, all operating and all evidenced. No grace period has been signalled.

WHAT EACH FAILURE IS WORTH

These are separate heads in the Schedule to the Act, not alternatives. One incident handled badly can attract more than one of them.

₹250 crFailure to take reasonable security safeguards against a personal data breach
₹200 crFailure to notify the Board or affected individuals of a breach
₹200 crFailure to meet the additional obligations around children’s data
₹150 crBreach of the extra duties placed on a Significant Data Fiduciary
₹50 crAny other breach of the Act or the Rules

BEFORE YOU BUDGET FOR ANY OF THIS

Find out whether you are three gaps away or thirty. It takes five minutes and costs nothing.

Fifteen questions across data inventory, consent, retention, breach readiness and vendor contracts. You get a score, the gaps ranked by exposure, and a benchmark against others in your sector. Most organisations find the expensive problems sit in places they had not thought to look, usually vendor contracts and retention.

Get my DPDP readiness scoreNo call booked, no document uploaded, no sales follow-up unless you ask for one.
OUR PROCESS

How an Engagement Runs

01

Score

Free, 5 minutes, sector benchmark

02

Assess

Two to four weeks, gap map and plan

03

Build

Controls shipped into your stack

04

Operate

Evidence, DPIA cycle, breach readiness

CASE STUDY

From policy on paper to compliance in production

How we rebuilt consent, automated retention and stood up a 72-hour breach path for a manufacturing client.

Read the case study

Find out where you actually stand

Fifteen questions across inventory, consent, retention, breach and vendors. Score and benchmark emailed as a two-page PDF.

Start the scorecard

Free · 5 minutes · results on screen