Hosted preference centre
Per-purpose granular consent capture. Branded with your logo, colours, displayName.
Embeddable widget.js
Drop-in JS that renders a DPDP-compliant banner and gates analytics until consent.
OTP-gated withdrawal
Withdrawal must be as easy as consent. We enforce OTP verification before flipping any record.
22-language auto-translation
Notice, banner, DSR responses auto-translated to every official Indian language via Bedrock.
60+ check website scanner
URL-based scanner across 10 weighted DPDP domains. Scored report you can hand to the Board.
AI Policy Generator
30-policy bank, AI-drafted from your org profile. Version-controlled, PDF export, public publish.
Protect Pro + Max assessment
350+ sectoral questions, parallel Fiduciary and Processor banks, evidence + AI vision validation.
Rights Manager (DSR)
Access · Correction · Erasure · Nominee · Grievance. Public portal at /rights/[org], OTP-verified.
Grievance with SLA timer
90-day grievance resolution clock, refusal-must-state-reasons enforcement, escalation to Board.
Breach lifecycle
Detect within 72h, notify Board within 24h. Reportable · containment · root cause · corrective.
RoPA + Data Map
Records of Processing Activities, data flows, vendor / processor catalog, risk aggregator.
Consent-as-a-Service
Use ProtectComply as your standalone consent layer. DEPA Rule-4 interop. BYO-domain.
Bedrock Copilot
Natural-language Q&A over your tenant's consent + assessment + grievance data.
Children's consent
Parental verification flow, no behavioural tracking of minors, no targeted ads.
Multi-tenant + RBAC
Multi-tenant invites, topbar switcher, immutable audit log, granular role-based access.
Capture → Prove → Honour → Audit
The four-stage DPDP operating loop, automated end-to-end.
Capture
Banner / preference centre / widget collects per-purpose consent with provenance — IP, UA, fingerprint, principal cookie.
Prove
Every record is timestamped, hash-chained, and exportable as a signed PDF receipt. Audit-grade evidence vault.
Honour
Withdrawals, DSRs, grievances flow through SLA timers. Refusal-must-state-reasons enforced at the contract level.
Audit
RoPA, scanner reports, assessment scores, breach logs — all regulator-ready exports, in any official Indian language.
Why a purpose-built platform beats the alternatives
What spreadsheets and generic GRC tools can't do for India's DPDP Act.