From sign-up to DPDP-ready, end-to-end.
Seven steps. Each one builds on the previous. Most teams finish steps 1-6 in their first week.
Sign up
5 minutesCreate your tenant. Multi-tenant by default — invite teammates with role-based access from the topbar. Tenant data lives in AWS Mumbai (ap-south-1) from the first byte. No data migration needed to switch tiers later.
Onboard
15 minutesFill the organisation profile: industry, processor / fiduciary role, employee count, data categories you process. This unlocks the right L1/L2/L3 banks, the right policy templates, and the right scanner weights for your sector. Healthcare and BFSI get specialised banks out of the box.
Pre-assessment
10 minutesRun the L1 readiness check. ~30 questions, multiple choice, no evidence required. Output: a 0-100 readiness score, a heatmap across DPDP §s, and a prioritised remediation backlog. This is the ₹999 Ready tier.
AI policy generation
1 hourGenerate your DPDP-grounded policy pack — Privacy Notice, Cookie Policy, Data Retention, Breach Response Plan, Vendor Agreement, and 25 more. AI drafts from your org profile and the live DPDP spec. Review, edit, sign-off by named roles, publish on a hosted URL or export as PDF.
Consent capture
2-3 hours integrationDrop the widget.js tag in your <head> and the banner appears. Set up the hosted preference centre at consent.yourbrand.com or use the platform-hosted version. Per-purpose granular consent, OTP-gated withdrawal, returning-principal recognition, 22-language notice — all live.
DSR + grievance handling
Wire-up: 30 minutesPublish your principal portals at /rights/[org] and /grievance/[org]. Configure auto-routing rules so requests land with the right team. The SLA timer starts when a request arrives; AI drafts the response letter; refusal-must-state-reasons is enforced at the contract layer.
Continuous monitoring
Always onSchedule recurring website scans. Run the L3 DeepDive assessment quarterly. Maintain the RoPA and TPRM registers. When a breach happens, the 72h-detect / 24h-notify lifecycle kicks in, and the Board form pre-fills from the breach record.
The bar we hold ourselves to
Production-ready in under 30 days
From a fresh tenant to live consent capture, principal portal, and quarterly assessment cadence — typically in three to four weeks.