Phased DPDP implementation

Agents do the work.

You approve. The proof is automatic.

AI agents discover your personal data, assess your gaps against the DPDP Act and Rules, propose the fixes — and only after you approve, execute them with a verifiable, rollback-capable, permanently auditable trail.

No live data connectors. No credit card. Self-reported readiness using selected questions from our 46-control library.

Illustrative example · fictional data

Posture

62/100

At Risk
drishtiFound 17 systems holding personal data
vibhaagClassified 1,284 fields
parikshan38 of 46 controls assessed
saakshiSealed 14 evidence artifacts
sudhaarGenerated 7-action plan
Chain verified · 1,284 entries

How it works

From discovery to authenticated closure. Agents do the work; you approve changes and review the proof.

1Discover
drishti· Discovery

Find personal data across your systems

2Classify
vibhaag· Classification

Categorise by DPDPA type

3Assess
parikshan· Assessment

Score against 46 controls

4Plan & rehearse
sudhaar· Remediation

Review typed actions, current dry-run evidence and validated rollback.

5You approve

An authorised human selects and signs the exact scope before any change.

6Execute
karya· Execution

Run only the actions covered by that approval.

7Reconcile
samadhan· Reconciliation

Compare recorded outcomes with the approved plan and flag discrepancies.

8Retain evidence
saakshi· Evidence

Seal supporting evidence and preserve the audit trail with Lekha.

9Report & review
prativedan· Reporting

Prepare source-linked reports for the required human review and release.

10Authenticate closure
pramaan· Closure Proof

Assemble the final proof dossier after verification and required human sign-offs. Missing proof blocks closure.

The non-negotiable safety model

Never autonomy without control

These are enforced architecturally, not by policy. You cannot turn them off.

01

You approve the change

No mutating agent action executes without a recorded human approval — a signed, scope-bound token, validated per action.

02

Preview before approval

Every executable action needs a completed dry-run with a readable diff before approval is even possible.

03

Validate the way back

Every action carries a generated, validated rollback plan, created at planning time — not under pressure at execution time.

04

Keep a traceable history

Governed workflow actions retain an append-only, hash-chained audit history linking decisions, execution and evidence.

05

Separate planning and execution

The planning agent (Sudhaar) holds no write credentials. Separation of duties between proposing and executing.

06

Bound the impact

Blast-radius caps are enforced pre-flight and in-flight, with a global kill switch.

Free 5-minute DPDPA gap-scan

Answer 12 questions. Get a prioritised, self-reported readiness report using selected controls from our 46-control library. No live data connectors. Your answers are submitted to our service to generate and save your report.

Your answers stay on this screen until you submit.

Tell us about your business

Prepare around your applicable DPDP deadlines.

Plan discovery, remediation and evidence review around the provisions and sector obligations that apply to your organisation.