A hands-on review of your readiness for the DPDP Act 2023, covering how consent is collected, how long data is retained, what notices say and breach response.
01 / Overview
The DPDP Act 2023 reshapes what Indian businesses must do with the personal data they hold, yet few product teams know exactly where theirs lives. We trace it through your database, analytics, support inbox, marketing systems and the spreadsheets saved on individual laptops, then assess consent, retention and processor agreements against the Act's requirements. The work is led by engineers rather than lawyers, so this is not legal advice. We clearly flag the points where you should involve counsel before acting.
02 / Deliverables
03 / Fit
Ideal for
What we need from you
You share these through the technical brief in your dashboard after checkout.
04 / Outcomes
Clear visibility of where personal data really lives
Consent and retention practices you can defend with confidence
A prioritised plan in place of a general unease about risk
This is a remote engineering service, so nothing is shipped physically. Work is delivered into systems you control. Read delivery & handover and refunds & cancellation for the full terms.
Hands-on penetration testing of your web application, with proof-of-concept evidence for each issue and a follow-up retest after your team has shipped fixes.
We compare each cloud identity's permissions with what it really uses, then tighten over-broad roles carefully so nothing in production stops working.
We find exposed credentials across your repositories, rotate them safely and add automated scanning so new secrets are caught before they are committed.
We put in place the technical controls and automatic evidence gathering that any SOC 2 Type II examination requires, all running before your observation period begins.
Choose a published service, or describe the problem and we will point you to the right starting place.