Deadlines read from the Act
A 30-day rights clock extendable to 90 with a written reason, a 90-day grievance clock and a 30-day appeal window, set the moment a request arrives.
Rights requests
PrivacyOS One India · DPDP Act 2023
The DPDP Act, run on its own clocks
DPDP compliance is a stream of deadlines: rights requests, grievances, breach notices, reassessments. Run from inboxes and spreadsheets, every one is a chance to miss a date. PrivacyOS One India starts the clock the moment something arrives, and keeps it moving until someone closes it.
The difference
From an inbox of requests to a system with deadlines
Four DPDP duties, before and after PrivacyOS One India.
Why Purplecop
What only PrivacyOS One India does
Built for the Indian Act from the start, not adapted from a GDPR tool.
Erasure that respects other laws
An erasure request is blocked automatically when the purpose is tied to another statute. Overriding it needs an approver and a written reason.
Retention holds
Notices in 23 languages
English and the 22 languages of the Eighth Schedule, three of them written right to left.
Consent & notice
Transfers blocked until safe
A processing record that sends data abroad cannot go live until its transfer safeguard is in place.
Cross-border gate
Audited clause by clause
An audit centre built on 257 clauses of the Act and 139 of the Rules.
Audit centre
Children and guardians handled
Records involving a minor, or a person with a lawful guardian, wait for guardian confirmation before they are used.
Guardian gate
What you get
Built on one platform, with people who use it
Platform
PrivacyOS One India
Built natively for the DPDP Act 2023 and the DPDP Rules, from the consent form to the regulator pack.
Rights requestsConsent & noticeROPADPIABreach workflowAudit centreCross-border gate
Services
Practitioners beside the platform
The team that runs your engagement works inside the same system, so the work they do stays with you.
Also on the platform
TPRM
Onboard, assess, score and continuously monitor every vendor in one workflow.
Third-party risk
Asset Intelligence
Asset discovery, network monitoring and the audit log in one module, so every asset’s data lives in one place.
Asset Intelligence
Phishing Simulation
Live phishing campaigns with per-user risk scores, run entirely in-house.
Human layer
LMS
Role-based security awareness training for every employee, tracked to completion.
Human layer
People
A directory of the people in scope for training, policy sign-off and access reviews.
People
RBAC
Role-based access control with granular permissions, on a least-privilege model.
Access control
Questions
What teams ask us about the DPDP Act
Does PrivacyOS file breach reports with the Data Protection Board?
No. It runs the 72-hour clock, notifies affected people and builds the regulator pack. The filing itself is done by you and recorded in the platform.
Is PrivacyOS a registered Consent Manager?
No. It manages your own consent records and connects to a registered Consent Manager through an integration.
Does erasure reach our other systems?
Erasure in PrivacyOS removes the person's profile and withdraws their consents there. Deletion in your other systems is carried out and evidenced separately.
How much faster is it?
It scales with how much you integrate: the more connectors you turn on, the more evidence is collected automatically, saving up to 70% of the time you used to spend preparing for each Board inquiry.
See it against your own scope
We will walk the product against your scope and show you what runs on day one and what needs configuring.