DPDP Act 2023DPDP Rules 2025Every sector
Privacy in a Box.
DPDPA compliance. As a subscription.
Every Redacto module, the Discovery Agent and four-step self-onboarding — one subscription, no implementation project. Sign up, onboard in an afternoon, switch on the flows.
Full enforcement
13 May 2027
Same clock for every size of business.
₹250 Cr
max penalty, no size exemption
9,000+
workflow connectors
22+
Indian languages for notices
4 steps
to self-onboard
Without Privacy in a Box
Spreadsheets across six teams, none current
Twelve-week discovery workshops
Manual DSARs that miss deadlines
Scrambling when a breach hits
Multi-crore implementation programme
With Privacy in a Box
One connected record of personal data
RoPA drafted in a single sitting
Rights requests automated end to end
72-hour Board notification pack, ready
One monthly subscription, no implementation fee
Consent
Purpose-wise consent ledger across app, web, branch, IVR and QR journeys. Notices in 22+ Indian languages; withdrawal propagated downstream.
Discover — Discovery Agent
A lightweight agent scans databases and file shares in place. Only findings and metadata reach the cloud.
Privacy Governance
RoPA drafted from sector templates. DPIA, retention and deletion rules, rights requests and grievances with case management.
Vendor / TPRM
Tiered assessments, DPAs, risk register and alerts. Vendor Exchange reuses assessments already completed.
Breach Management
Incident log, severity triage and evidence trail. 72-hour Data Protection Board and data-principal notification workflow.
Trust Center + Academy
Publish your privacy posture for customers and auditors. Train every employee on DPDPA duties.
- Step 1 of 4
Know your organisation
Legal name, entities, the departments that touch personal data and a data owner for each.
- Step 2 of 4
Know your products & services
What each entity sells — tells Redacto where personal data is collected. Optional.
- Step 3 of 4
Know your systems
Where each entity's data lives: ERP, CRM, HRMS, core apps, document stores. Optional.
- Step 4 of 4
Create processing activities
Sector templates draft your RoPA with departments, owners, products and systems pre-filled.
DPDPA done. The seven-point checklist.
Everything you need to be compliant by 13 May 2027 — nothing you have to build or buy separately.
Self onboarding
Four guided screens. Leave the first sitting with an entity map, named data owners and a drafted RoPA. No consultant, no workshop.
Consent integration guide
Step-by-step guide, SDKs and APIs to put purpose-wise consent into every app, web, branch, IVR and QR journey.
Plug & play: Consent / DSAR automation
No-code, Zapier-style flows on 9,000+ connectors: withdrawals propagated, rights requests answered on time, breach packs for the 72-hour clock.
Plug & play: system connectors
Connector templates for core systems and generic REST, read-only JDBC and SFTP feeds. Configured by your own IT team.
Subscription
One monthly fee covers every module, the Discovery Agent, the workflow engine and India hosting. No implementation fee.
Easy on the pocket
From ₹10k a month. A few lakh a year, approved once — instead of a multi-crore programme.
Secure, enterprise-grade
mTLS, WAF, SSO/MFA, a separate encryption key per tenant, full audit trail, data never leaving India.
Sign up, onboard in an afternoon, connect your systems, switch on the flows — compliant well before the deadline, with no project on your side.
| Plan | Monthly active users | Price / month | Typically |
|---|---|---|---|
| Mini | Up to 5,000 | ₹10k – 50k | D2C brands, e-commerce, travel, hospitality, startups |
| Starter | 5,001 – 10,000 | ₹1,00,000 | Small NBFCs, single-entity enterprises, clinics, ed-tech |
| Growth | 10,001 – 25,000 | ₹2,00,000 | Multi-location businesses, banks with digital channels |
| Scale | 25,001 – 50,000 | ₹3,00,000 | Insurers, NBFCs, hospital chains, retailers |
| Max | 50,001 – 1,00,000 | ₹4,00,000 | Large enterprises on the SaaS edition |
Every plan includes all modules, the Discovery Agent, workflow engine, sector templates, Redacto Academy and India hosting on AWS, GCP or CtrlS with DR.
₹250 Cr
Failure to take security safeguards resulting in a breach
₹200 Cr
Failure to notify the Board and affected persons of a breach
₹200 Cr
Non-compliance with children's data provisions
₹150 Cr
Additional obligations of Significant Data Fiduciaries
₹50 Cr
Other violations of the Act or Rules
ISO 27001 · ISO 27701 · ISO 42001 · AICPA SOC 2 · MeitY Model Code for Consent aligned
Does DPDPA apply to my business?
If you process digital personal data of individuals in India — customers, employees or partners — you are a Data Fiduciary. There is no size exemption: the ₹250-crore penalty schedule applies to a ten-person D2C brand exactly as to a national bank.
When do I need to be compliant?
Full obligations apply from 13 May 2027. Consent Manager registration and Significant Data Fiduciary provisions start November 2026.
Do we need consultants to get started?
No. Four self-onboarding steps, designed for a single sitting. Your IT team configures connectors in the console; Redacto support handles exceptions, not projects.
Does our data leave our systems?
No. The Discovery Agent classifies personal data where it sits and sends only findings and metadata. Hosting is in Indian regions of AWS, GCP or CtrlS, with DR.
What if we outgrow the plan?
The plan moves up a band only when measured monthly active users cross it. Outgrow the SaaS limits and your workspace moves to a dedicated stack without re-implementation.
Get DPDPA-ready before 13 May 2027.
Sign up, onboard in an afternoon and switch on the flows. No project, no consultants.
Make me complianthello@redacto.io · Bangalore, India