Common questions

We implement the technical controls and evidence that DPDP requires, and help you get DPDP-ready. Compliance is a legal position your business holds, so we don’t certify it or guarantee it. Your lawyers, or our law-firm partner, advise on the legal side.

Yes, for interpreting the law and drafting notices, policies and contracts. If you don’t have one, we work with a data-privacy law firm that can help.

A policy says what you will do. DPDP also expects your systems to do it: record consent, honour withdrawal, erase data on time, protect it and report breaches. That is the work we do.

The core obligations apply from 13 May 2027. Changing systems takes months, so most businesses are starting now.

Yes. The Act sets no minimum size or severity: every personal data breach must be reported to the people affected and to the Data Protection Board.

Only as much as the work needs, under a signed data-processing agreement. Where we can work with masked or sample data, we do.

Rarely. Most of our work adds controls to the systems you already run.

Yes. We configure what the software allows, add controls around it, and set up the processes and records it can’t provide.

The readiness assessment takes one to two weeks. Implementation depends on the gaps found; you get a fixed scope and quote first.

No. Certification is granted only by accredited certification bodies.

No. We don’t offer round-the-clock monitoring. We can work alongside the provider you choose.