How we work
From first call to audit-ready
A clear path, fixed scope at every stage, and no surprises about who is responsible for what.
A conversation
Free · about 45 minutes
We learn which systems you run, what personal data they hold, and where you feel exposed. You leave with an honest view of whether we can help.
Readiness assessment
1–2 weeks · fixed price
We map your personal data, test your systems against what DPDP requires, and give you a gap report with a prioritised fix list. It’s yours to keep, whatever you decide next.
Implementation
Scoped sprints
We build the fixes into your applications and databases: consent, rights, retention, security and breach controls. Each sprint has a defined scope and a demo at the end.
Ongoing support
Monthly
Breach drills, upkeep of the grievance workflow, periodic reviews, and an evidence pack kept current as your systems change.
Who does what
Clear roles, written into every engagement
| Responsible for | Not responsible for | |
|---|---|---|
| Your lawyers, or our law-firm partner | Interpreting the Act; advising on your legal obligations; reviewing notices, contracts and policies | Building or changing systems |
| Fidura | Technical controls, application workflows, database changes, security safeguards and evidence | Legal advice, compliance decisions, certifying compliance |
| You | Compliance decisions, policies, business processes and your duties as a Data Fiduciary | These stay with you: the Act places them on your business |
Example. How long to keep customer records is a legal question. Your lawyer advises, you decide, and we build the deletion job and record who decided what.
What we’ll need from you
- A named person who owns DPDP in your business
- Access to the systems in scope, under agreed security terms
- Decisions on legal questions, with your lawyers, when the work reaches them
Our commitments
- A written scope and quote before any paid work begins
- Named engineers, not an anonymous pool
- Access to your systems only as the work needs, under a signed data-processing agreement
- Everything we build is documented and handed over
We practise what we build
Triline runs software for its clients, which makes us a data processor under the Act. We hold our own systems to the same standard we build for you, and this website follows the same rules: a clear notice, consent on every form, and a grievance contact.
Readiness check
Not sure where you stand?
Ten minutes, twenty questions, an instant readiness score. No sign-up needed to see your result.