Product
Know where you stand.
Fix it. Prove it. Stay ready.
The DPDP Act is a 40-page reading assignment with a ₹250 crore penalty cap. We turn it into a scored to-do list for your whole business - then start closing the gaps the same day, beginning with a consent banner served by one tag.
What you get
Checks mapped to the law
Notices, consent behaviour, forms, trackers, and data flows - each check names the section of the Act or the 2025 rule it serves.
A score you can defend
One readiness score, weighted by severity, with an honest flag on every check that needs human judgement. No false certainty.
Guidance, not homework
Every gap comes with plain-language steps your website team can act on this week - and a note on what to confirm with counsel.
Monitoring for drift
Websites change weekly. Scheduled re-checks alert you when a release quietly reopens a gap - long before anyone else notices.
Reports worth forwarding
Clean, printable readiness reports with a letterhead, the scale explained, and a methodology section. Built to be shown to management.
Room for the whole team
Invite the people who will do the fixing, and use our starter templates - privacy notice, processor agreements, breach playbook - to unblock the paperwork.
The fix, built in
From Micro up, the same tag serves your consent banner: trackers held until consent, a real decline, one-tap withdrawal, records kept. The biggest gap most sites have, fixed with one paste.
Works with any consent manager
Already running a CMP, or planning one? Checks, banner, and reports work alongside it. We are the readiness layer, not a lock-in.
Your website is half the story. Your database is the other half.
The Schema check reads your table structure - column names only, never the data - and tells you which columns hold personal data and what each needs under the Act: encryption, masking, retention, consent. The analysis runs in your browser, so your schema never leaves your machine.
- Flags Indian identifiers first: Aadhaar, PAN, UPI, IFSC
- Maps every column to its DPDP obligation and section
- Becomes your starting inventory for records of processing
Want proof, not guesses? The Discover agent runs on your own machines and validates the actual values - Aadhaar by checksum, PAN by structure - reporting only metadata back.
customers3 of 6 columns flagged
What we cover - and what we do not pretend to
No tool can see every place personal data lives, and anyone claiming 100 percent coverage of your apps, APIs, and processes is selling you risk. Here is the honest map: what is covered today, and where people are the right tool.
- Your website
- Shopify / Wix / WordPress
- Mobile app
- WhatsApp and chat
- Phone calls / IVR
- Paper forms and events
- Marketplaces
- Payment / booking pages
- Email and SMS lists
- CCTV
- Employees
Your business
Your database
- Notice
- Consent
- Security
- Erasure
- Breach plan
- Agreements
| Where personal data lives | How it gets covered | Status |
|---|---|---|
| Public website pages | Automated crawl - no code or tag needed | Covered today |
| Database structure | Data map - schema analysis in your browser, structure only | Covered today |
| Logged-in areas behind sign-in | Paste the tag from Settings - detection activates at launch | Covered todayInstall tag |
| Android, iPhone, and desktop apps | Guided app assessment, store-listing check, and the backend via the schema check | Covered todayStart the app assessment |
| WhatsApp, phone/IVR, paper forms, CCTV | Channel kits - opt-in templates, call scripts, QR notices, signage; script verifier and opt-in logging on Business | Covered todaySee the channel matrix |
| Employee data in HR systems | Employee pack + processor agreement with your HR vendor - a tag cannot see inside third-party HRMS, so we do not pretend it can | Covered todayEmployee kit |
| APIs and partner data sharing | Our processor agreement checklist plus specialist review | Needs peopleAgreement checklist |
| Internal processes, contracts, records | Expert review on Business, or your counsel | Needs peopleBusiness plan |