Skip to content
Scope, price and timeline published on every engagement page Engineers assigned within 3 working days of kickoff Your repositories, cloud accounts and licences stay in your name
UniStack.
Security & Compliance Fixed scope

DPDP Act Readiness Review

A practical gap assessment against India DPDP Act 2023, covering consent, retention, notices and breach procedure.

Delivered in

15 working days

Revisions

One round, included

Ownership

Yours from day one

Overview

What this engagement is

The Digital Personal Data Protection Act changes what Indian businesses must do with personal data, and most product teams have not mapped where that data actually sits. We inventory it: the database, the analytics tool, the support inbox, the marketing platform, the spreadsheet on someone's laptop. Then we assess your consent flows, retention practice and processor contracts against the Act, and produce a remediation plan with effort estimates. This is engineering-led rather than legal advice, and we say plainly where you need a lawyer instead.

Deliverables

What lands in your repositories

7 items
  • Personal data inventory across systems, vendors and storage locations
  • Data flow maps showing collection, processing, sharing and deletion
  • Gap assessment against DPDP Act obligations with severity ratings
  • Consent notice and consent capture review with rewritten wording
  • Retention schedule proposal by data category
  • Data principal rights process covering access, correction and erasure
  • Breach notification procedure and remediation plan with effort estimates

Outcomes

What changes once it ships

You know where personal data lives, often for the first time

Consent and retention practice defensible rather than assumed

A prioritised plan instead of a vague sense of exposure

Process

How the 4 stages run

  1. 01

    Discover

    systems interviewed and personal data located, including shadow copies

  2. 02

    Map

    flows documented from collection through to deletion

  3. 03

    Assess

    practice compared against the Act clause by clause

  4. 04

    Plan

    gaps prioritised with owners, effort and a suggested sequence

Booked most often by

  • Indian companies holding customer personal data at any scale
  • Products with users in India expanding their data collection
  • Teams whose privacy policy was copied from another website years ago

What we need from you

  • Access to system owners for short interviews
  • Your current privacy policy, vendor list and consent screens
  • Someone senior enough to own the remediation plan afterwards

These are collected in the technical brief that opens in your dashboard the moment payment clears. The clock starts when they arrive, not before.

Answers

Questions this engagement raises

No. It is a technical and process readiness review. We work alongside your legal counsel and flag anything needing their judgement.

The inventory and flow maps serve both. A full GDPR assessment adds scope and we will quote it.

Yes. Obligations scale with volume and sensitivity, but they start from the first data principal.

This is engineering work, not a physical product — nothing ships and there is no stock to run out of. Delivery is to the working days stated above, into systems you control, and the refund terms set out what happens if we miss the date.

Booked alongside

Engagements that pair with this one

All Security & Compliance
Security & Compliance Most booked

Web Application VAPT

A manual penetration test of your web application with proof-of-concept evidence and a retest after you fix.

Manual penetration test covering authentication, authorisation and business logic
12 working days Scope published

Fixed fee · GST incl.

₹29,999

Read the scope
Security & Compliance

SOC 2 Evidence Groundwork

The technical controls and evidence collection an SOC 2 Type II audit needs, set up before the observation window starts.

Control gap assessment against the Trust Services Criteria you are scoping
30 working days Scope published

Fixed fee · GST incl.

₹44,999

Read the scope

GST included

₹22,999

Capacity open this month

Read the scope. Know the price. Start on Monday.

No discovery calls to find out a number, no statements of work that take three weeks to sign. Pick the engagement that matches the problem and we assign the engineers.

Browse engagements Scope it with us