Purposes, notices, consent
- Purpose Registry
- Hash-linked, signed ledger
- Consent ID receipts
- Legacy import, re-notice
One connected system for the whole DPDP Act
One Purpose Registry. One evidence trail. AI that suggests, people who approve.
Your choices
Loan eligibility
Card offers
Marketing
Save choices
Cookie consent
- Website scanner
- Real prior blocking
- Reject as easy as Accept
Children's data
- Waits for a verified guardian
- No ID documents stored
- Move to adult at 18
Rights and grievances
- All request types, one queue
- Identity checked first
- Data Principal 360
Breach management
- CERT-In 6-hour step
- Board report in 72 hours
- Risk rating
Retention and deletion
- Rules per purpose
- Legal holds always win
- SHA-256 deletion certificate
Data discovery
- Databases, S3, file shares
- OCR in 12 scripts
- Only masked examples kept
Cross-border transfers
- Transfer register
- Restricted-country list
- API check before sending
AI Privacy Copilot
- Self-hosted open model
- Answers with sources
- A person reviews everything
AI
AI where the work happens
AI Privacy Copilot
Answers from your own records, with links.
AI data discovery and classification
Reviews new findings after every scan.
AI notice generator
Create purpose with AI
Purpose and consent mapper
DPDP gap assessment
Document analyser (DPAs, contracts)
Rights request triage and reply drafts
Risk scoring with explanations
Vendor risk summaries
Breach response assistant
DPO desk summaries
AI suggests. A person decides.
Self-hosted AI, your data stays with you. Every AI call logged as evidence.
Governance
Show your work to the Board and the auditor
Privacy by Design & DPIA
Reviews, risk register, go-live gate
Records of processing
Live register, hashed snapshots
Vendor risk
Questionnaires and risk tiers
Reports & Board packs
Dashboards, audited exports
Controls, gaps & risk
Control library, DPO desk
Readiness & Trust Center
A readiness score, not a certificate
Channels & SDKs
Reach people where they are
- WhatsApp: Agree, Decline, STOP
- SMS and e-mail re-notices
- Web SDK and cookie banner
- Android SDK; iOS SDK in source form
- API and signed webhooks
Security & operations
Enterprise controls from day one
SSO and MFA
Keycloak or Microsoft Entra ID
Roles
Maker-checker in the database
Tenant isolation
Row-level security
Encryption at rest
AES-256-GCM, key per organisation
Security operations
SIEM, health, backup logs
Runs where you need
Cloud, private or on-premise