How It Works

From sign-up to DPDP-ready, end-to-end.

Seven steps. Each one builds on the previous. Most teams finish steps 1-6 in their first week.

Sign up

5 minutes

Create your tenant. Multi-tenant by default — invite teammates with role-based access from the topbar. Tenant data lives in India (Azure Central India) from the first byte. No data migration needed to switch tiers later.

Onboard

15 minutes

Fill the organisation profile: industry, processor / fiduciary role, employee count, data categories you process. This unlocks the right Protect Pro and Protect Max banks, the right policy templates, and the right scanner weights for your sector. Healthcare and BFSI get specialised banks out of the box.

Pre-assessment

10 minutes

Run the L1 readiness check. ~30 questions, multiple choice, no evidence required. Output: a 0-100 readiness score, a heatmap across DPDP §s, and a prioritised remediation backlog. This is the Protect Pro tier.

AI policy generation

1 hour

Generate your DPDP-grounded policy pack — Privacy Notice, Cookie Policy, Data Retention, Breach Response Plan, Vendor Agreement, and 25 more. AI drafts from your org profile and the live DPDP spec. Review, edit, sign-off by named roles, publish on a hosted URL or export as PDF.

Consent capture

2-3 hours integration

Drop the widget.js tag in your <head> and the banner appears. Set up the hosted preference centre at consent.yourbrand.com or use the platform-hosted version. Per-purpose granular consent, OTP-gated withdrawal, returning-principal recognition, 22-language notice — all live.

DSR + grievance handling

Wire-up: 30 minutes

Publish your principal portals at /rights/[org] and /grievance/[org]. Configure auto-routing rules so requests land with the right team. The SLA timer starts when a request arrives; AI drafts the response letter; refusal-must-state-reasons is enforced at the contract layer.

Continuous monitoring

Always on

Schedule recurring website scans. Run the L3 DeepDive assessment quarterly. Maintain the RoPA and TPRM registers. When a breach happens, the 72h-detect / 24h-notify lifecycle kicks in, and the Board form pre-fills from the breach record.

The bar we hold ourselves to

Production-ready in under 30 days

From a fresh tenant to live consent capture, principal portal, and quarterly assessment cadence — typically in three to four weeks.

Start your 30 days →Book a guided walkthrough