DPDP risk, quantified and auditable.
Up to ₹250 crore per failure. The platform turns DPDP from a legal abstraction into a measured risk you can defend to the Board.
Risk surfaces we cover
Breach §8(6) exposure
72h detect / 24h Board-notify clocks built into the breach lifecycle. Containment status and preliminary RCA captured automatically.
Vendor + processor risk
TPRM module tracks DPAs, sub-processor disclosures, and DPDP §8(8) flow-down obligations. Expired DPAs surface in weekly review.
Evidence vault
Per-question evidence upload with AI vision validation. Immutable audit log: who did what, when, from which IP and UA. Exportable as signed PDF.
Quantified DPDP risk
L1 / L2 / L3 assessment scores per module + per section. Trended over time so you can show the Board the curve, not just the number.
Consent provenance
Every consent record carries capture IP, user-agent, fingerprint, and per-tenant principal cookie. Hash-chained for tamper evidence.
Children's data safety
§9 children's-mode policy auto-disables tracking and targeted ad pixels at the widget layer. Audit trail proves it.
Integration surface
Webhooks
Stream every state change — consent · DSR · grievance · breach — into your SIEM, ticketing system, or data warehouse.
REST API
Programmatic access to consent records, DSR requests, assessment scores, RoPA entries, audit log. OpenAPI spec available.
SSO ready
SAML and OIDC SSO on Enterprise. SCIM provisioning on roadmap. BYO identity provider.
Audit log export
Daily / weekly export to S3 or a webhook destination. JSON or CSV. Signed integrity hashes per batch.
Our own security posture
AWS Mumbai data residency, TLS 1.2+, AES-256 at rest, RBAC, immutable audit log, 24h breach-notification SLA to affected tenants. SOC 2 Type II in pre-audit; ISO 27001 on roadmap. We don't claim certifications we don't hold.
Read the full security page →Take DPDP off the open-risk register.
Free readiness assessment scores you against every §. No sales call required.