Services

End-to-end DPDP compliance services for Indian businesses.

From your first readiness assessment to ongoing fractional DPO support — structured, practical, and built around how your teams actually work.

From ₹45,000

Duration: 2–3 weeks

DPDP Readiness Assessment

A structured audit of your current data handling against the DPDP Act's principal obligations — notice, consent, security, breach response, and data principal rights.

Why it matters

Without a baseline, every other compliance investment is a guess. This is the single fastest way to understand your real exposure before you spend a rupee on tooling.

Ideal for

SMEs and startups starting their DPDP journey.

Deliverables

Gap analysis report scored by risk
Prioritized 90-day remediation roadmap
Executive-ready compliance summary
Sector-benchmarked maturity scoring

Project-based

Duration: 3–5 weeks

Data Mapping & Inventory

Identifying where personal data is collected, where it flows, who has access, and how long it's retained — across product, HR, marketing, and vendor systems.

Why it matters

DPDP requires you to know what you hold and why. A real data map is foundational to responding to data principal requests, breach notifications, and audit defense.

Ideal for

Mid-size companies and SaaS startups with multiple systems.

Deliverables

Personal data inventory by system
Cross-system data flow diagrams
Retention & purpose schedule
Sensitive data heat map

Project-based

Duration: 4–8 weeks

Vendor Compliance Review

Reviewing your third-party processors — payroll, hosting, analytics, support tools — and updating contracts to meet DPDP processor obligations.

Why it matters

You remain liable for data your vendors process. Most existing SaaS contracts lack DPDP-compliant DPAs, breach assistance clauses, and sub-processor restrictions.

Ideal for

Any company using 10+ third-party SaaS tools.

Deliverables

Vendor risk register
DPDP-compliant DPA template
Negotiation support with key vendors
Sub-processor monitoring framework

From ₹60,000

Duration: 3–4 weeks

Privacy Policy & Consent Framework

Drafting clear, DPDP-aligned privacy notices and designing a granular consent capture and withdrawal system.

Why it matters

Generic policies and 'Accept All' banners are no longer defensible. DPDP requires specific, informed, and revocable consent backed by auditable records.

Ideal for

Consumer-facing SaaS, fintech, edtech, and ecommerce.

Deliverables

DPDP-compliant Privacy Notice
Consent UX wireframes and copy
Consent record-keeping spec
Withdrawal & preference center

From ₹50,000

Duration: 3–5 weeks

Employee Data Protection Framework

Internal policies, procedures, and training to protect employee personal data across the HR lifecycle — hiring, payroll, performance, monitoring, and exit.

Why it matters

Employee data is in scope under DPDP. Most companies have weaker controls internally than they do externally, and HR data complaints are a common enforcement trigger.

Ideal for

Companies with 50+ employees and an internal HR function.

Deliverables

Employee privacy notice
HR data handling SOPs
Background check & monitoring policy
Exit & data deletion procedure

From ₹35,000 per workshop

Duration: 2 weeks

DPDP Training Workshops

Practical, role-based training for HR, engineering, support, and leadership teams — built around your real systems and workflows.

Why it matters

Compliance is fundamentally a people problem. The fastest gap close is a team that knows how to recognize and handle personal data correctly in their day job.

Ideal for

Internal teams responsible for data handling.

Deliverables

Two 90-minute live workshops
Role-specific quick-reference guides
Knowledge assessment & certificate
Recorded refresher modules

Retainer from ₹75,000/month

Duration: Ongoing

Fractional DPDP Officer (Retainer)

Ongoing senior-level DPDP advisory on a monthly retainer — review, escalation support, vendor diligence, board updates, incident response, and regulator-readiness.

Why it matters

Most growing companies don't need a full-time DPO yet but do need continuous expert oversight to stay defensible during enforcement reviews and customer audits.

Ideal for

Series A–C startups and mid-sized SMEs.

Deliverables

Monthly compliance review
Inbox-priority advisory access
Quarterly board / leadership report
Incident & breach response support

Engagement Models

Four ways to work with us.

Pick the structure that fits where you are today — and switch as you grow.

Diagnostic

One-off engagements: readiness assessments, data mapping, policy work, training.

Best for first-time DPDP investment or fixed-scope problems.

Implementation Sprint

6–12 week bundled engagement combining assessment + remediation across the highest-risk areas.

Best for SMEs that want to be defensible within a quarter.

Fractional DPO Retainer

Monthly retainer with ongoing oversight, advisory, and incident response.

Best for funded startups and mid-size companies needing continuous coverage.

Advisor for CA / Consulting Firms

Whitelabel or partnered support for advisory firms serving portfolio clients on DPDP.

Best for firms whose clients keep asking 'are we compliant?'

Our Process

How an engagement actually runs.

Discovery call

Free 30-minute call. We understand your business, data footprint, sector exposure, and the immediate triggers driving DPDP urgency.

Scoping & proposal

Within 3 working days you receive a fixed-scope proposal with deliverables, timeline, and a transparent fee — no upsells, no surprises.

Engagement & implementation

Weekly working sessions with your stakeholders. We co-build the artifacts inside your tools — not as PDFs we hand over and disappear.

Handover & sustain

Final review with leadership, training for the team that owns it, and an optional retainer to keep the program living and defensible.

"What sold us was the honesty during scoping — they told us which two services we actually needed and which two we didn't. That's not how consultancies usually work."

Head of Operations

Edtech, Pune

Engagement FAQs

Can I bundle multiple services for a discount?+

Yes — most engagements combine 2–4 services into a single implementation sprint. Bundled pricing is typically 15–25% lower than the sum of standalone projects, and the work is faster because we already have your context.

Do you sub-contract or use offshore teams?+

No. Every engagement is delivered directly by the founder and a small senior team. You don't get bait-and-switched after the proposal.

What happens after the engagement ends?+

You own everything we produce — fully editable documents, working consent specs, vendor templates. Most clients move into a light-touch retainer for ongoing review; some don't, and that's fine.

How do you handle confidential business information?+

We sign mutual NDAs before any sensitive material is shared. Our internal handling is itself DPDP- and GDPR-aligned — that's table stakes for a privacy consultancy.

Can you work with our existing law firm or compliance partner?+

Absolutely. We frequently work alongside law firms — they own legal opinions and we own operational implementation. Clear lanes, no overlap.

Not sure which service you need?

Start with a free 20-minute call. We'll tell you straight where your biggest compliance gaps are — and where you don't need to spend.

Book Free Consultation