Most organisations handling personal data in India are not compliant with the DPDP Act 2023. Find out exactly where yours stands — free, in 15 minutes, no legal background needed.
You'll know exactly which of the 11 DPDP obligations your organisation is failing — and what to fix first.
The Clock Is Running
August 2023
DPDP Act Enacted
The Digital Personal Data Protection Act receives Presidential assent. It becomes law.
November 2025
Implementation Window Opens
Government officially begins the 18-month compliance preparation period for all organisations.
Now
Most Organisations Unprepared
The majority of Indian organisations have not begun mapping their data obligations under the Act.
Mid-2027
Compliance Expected
Enforcement risk rises significantly. Organisations without systems in place face regulatory exposure.
Every organisation that collects personal data in India is legally obligated to comply — regardless of size or industry. Not knowing where you stand is itself a risk.
What We Assess
Every section maps to a specific legal obligation. Your score tells you exactly where you stand and what to fix first.
Data Collection
Are you collecting only what you need?
Consent & Notice
Do users know what data you take and why?
Security Safeguards
Who has access? Is it encrypted?
Breach Response
Can you detect and report a breach in 72 hours?
Data Rights
Can users view, correct, or delete their data?
Vendor Management
Do your vendors meet DPDP standards?
Children's Data
Do you verify age and get guardian consent?
Data Retention
Do you delete data when it's no longer needed?
Governance
Is someone accountable for data protection?
Purpose Limitation
Is data used only for what users agreed to?
Data Inventory
Do you know exactly what data you hold?
Cross-Border Transfer
Is personal data sent outside India?
Rules pending govt. notificationWhat We're Building
This free assessment is the diagnostic layer — one part of a complete DPDP compliance platform we're building for Indian organisations. Here's what the full system looks like.
The engine of the platform. It identifies what personal data you hold, where it originates, how it's processed, who has access, and which vendors are involved. Then it keeps watching — tracking changes, flagging new risks, detecting drift from declared purpose.
Captures consent at the point of collection. Links it to specific purposes. Maintains a full timestamped history. Handles consent withdrawal — and flags every processing activity affected when a user withdraws.
Operationalises how your organisation handles user rights. Access, correction, erasure, grievances — each through structured intake, verification, assignment, execution, and documented closure with full audit logs.
Maps every DPDP obligation to a tracked status. Stores policies, consent records, and system outputs — linked directly to the obligations they satisfy. Generates audit-ready bundles. Connects you to privacy experts for validation, review, and certification.
How It Works
Answer plain-English questions
No legal jargon. Questions are grouped by section. Follow-ups appear only when relevant to your organisation.
AI scores your compliance posture
Every answer is analysed in context — understanding what your specific combination of responses means under the DPDP Act.
See your section-by-section breakdown
Your score across all 11 DPDP sections with colour-coded risk levels and the exact Act reference for each.
Get a prioritised action plan
Actions ranked by urgency — each mapped to a specific DPDP section with a concrete step your team can implement immediately.
What You Get
A section-by-section compliance score, AI-generated summary, and a prioritised action plan — specific to your organisation.

Compliance Score
0–100 score across all 11 DPDP sections
Section Breakdown
See exactly which areas carry the most risk
Priority Actions
Ranked by urgency with DPDP Act references
Questions We Hear
These are the real objections. We'd rather address them here than have you leave with the wrong impression of what this is — and what it isn't.
Every organisation handling personal data in India needs to know this.
Free · No credit card · 15 minutes · Helping shape what we build next