A small team building privacy infrastructure for Indian organisations, from the Act outwards. We claim nothing we cannot evidence.
Most tools on the Indian market began as GDPR products with the vocabulary swapped. The obligations do not map cleanly: consent-centric processing, the Consent Manager construct, notice in Eighth Schedule languages and the Board's inquiry-led penalty regime have no European equivalent worth retrofitting.
Almost every organisation intends to comply. Very few can produce, on demand, what a specific person consented to on a specific date, under which notice version, in which language. The product exists to make that answer trivial.
When a check cannot complete, the honest default is refusal. Software that processes on error is software that will eventually process something it should not have, quietly, for months.
We publish what the product does and what the Act requires, and we do not dress a roadmap up as a shipped feature. We also do not show customer logos, because naming an organisation without its permission would be a strange way to run a privacy company.
Compliance software is usually built by engineers working from a summary of the law, then reviewed by lawyers after the fact. This team was assembled to remove that handover, so the clause and the system it becomes get worked out together.
