8
Request types, one queue
Access, correction, erasure, grievance, portability, nomination, consent withdrawal and restriction, across 12 workflow states.
Rights requests
PrivacyOS One India · Rights requests
Rights requests that cannot miss a deadline
Every rights request under the DPDP Act starts a legal clock. Handled through a shared inbox, the clock runs whether anyone has noticed or not. PrivacyOS One India starts the clock on intake, routes the request, and escalates it until it is answered.
The difference
From a shared inbox to a queue with clocks
The life of one rights request on PrivacyOS One India.
Why Purplecop
What sets PrivacyOS rights handling apart
Built on the DPDP Act's own deadlines, not a generic ticket queue.
Deadlines from the Act
A 30-day clock extendable to 90 with a written reason, a 90-day grievance clock and a 30-day appeal window.
Clocks
Triage on arrival
A minor's request is held for verification, a person linked to a breach is escalated, and erasure goes to the DPO.
Triage
Erasure with a legal check
Erasure is blocked when a purpose is tied to another statute, and overriding it needs an approver and a reason.
Retention holds
Nominees recorded
A nomination request writes the nominee onto the person's profile.
Nomination
What you get
Built on one platform, with people who use it
Platform
PrivacyOS One India
Built natively for the DPDP Act 2023 and the DPDP Rules, from the consent form to the regulator pack.
Rights requestsSelf-service portalEscalationRetention holdsAudit log
Services
Practitioners beside the platform
The team that runs your engagement works inside the same system, so the work they do stays with you.
Also on the platform
TPRM
Onboard, assess, score and continuously monitor every vendor in one workflow.
Third-party risk
Asset Intelligence
Asset discovery, network monitoring and the audit log in one module, so every asset’s data lives in one place.
Asset Intelligence
Phishing Simulation
Live phishing campaigns with per-user risk scores, run entirely in-house.
Human layer
LMS
Role-based security awareness training for every employee, tracked to completion.
Human layer
People
A directory of the people in scope for training, policy sign-off and access reviews.
People
RBAC
Role-based access control with granular permissions, on a least-privilege model.
Access control
Questions
What teams ask us about rights requests
How is identity checked?
Requests through the portal are verified by a one-time email code. Further identity checks are confirmed by your DPO in the platform.
Does erasure reach our other systems?
Erasure removes the person's profile and withdraws their consents in PrivacyOS. Deletion in your other systems is carried out and evidenced separately.
Can access requests be answered automatically?
Access and portability requests are resolved automatically when identity is already verified; you can switch that off.
How much faster is it?
It scales with how much you integrate: the more connectors you turn on, the more evidence is collected automatically, saving up to 70% of the time you used to spend preparing for each request.
See it against your own scope
We will walk the product against your scope and show you what runs on day one and what needs configuring.