The complete platform for India's Digital Personal Data Protection Act 2023 — consent, children's data, rights requests, cross-border controls, breach handling, and a tamper-evident audit trail. Not just a cookie banner.
No credit card required · Free plan available
Built for the way India collects consent
Features
Built specifically for India's DPDP Act 2023. Every feature maps to a statutory obligation — from consent all the way to breach handling.
Granular, purpose-level consent through an embeddable banner — with Google Consent Mode v2 and Global Privacy Control built in. Per DPDP Section 6.
Access, Correction, Erasure, Grievance and Nomination requests — identity-verified, with configurable deadline tracking you define. Sections 11–14.
Age-gating plus verifiable parental consent via a guardian OTP flow, and automatic expiry when a minor comes of age. Section 9.
Auto-generate and host versioned Privacy Policy, Terms, and Cookie Policy per project — optionally white-labelled on your own domain.
Per-purpose retention with automatic deletion or anonymization when it lapses, and downstream erasure signals to your processors. Section 8.
A consent gate your own services call before they process, a decision log that counts every answer, and downstream erasure signals to your processors. Section 8(4) asks for technical measures, not filing.
Every consent event is hash-chained and cryptographically receipted — a defensible, inspection-ready record. Plus a breach register for Section 8(6).
DPDP Coverage
Most tools stop at a consent banner. DPDP Comply covers every obligation a data fiduciary carries under the Act.
Notice to data principals
Consent & purpose limitation
Withdraw as easily as given
Cease processing on withdrawal
Security safeguards & breach register
Erasure on retention expiry
Children's data & parental consent
Right to access information
Right to correction & erasure
Grievance redressal
Right to nominate
Cross-border transfer controls
Records of processing activities
Processor / vendor register
Why teams switch
Your backend asks before it processes: one call returns allow or deny per purpose, with the reason. Recording consent proves what someone agreed to — this is what makes the application honour it.
Learn moreThe banner emits Consent Mode v2 signals so your GA4 and Google Ads keep modeling conversions — compliantly, out of the box.
Learn moreAutomatically honors the browser GPC signal, recording a compliant opt-out without ever interrupting the visitor.
Learn moreServe the consent experience in India's regional languages so consent is genuinely informed — and valid.
Learn moreEnterprise-ready
We load your site in a real browser as a visitor from India and record every tracker that fires before any consent is given. Then we visit again sending a browser opt-out signal, and click your own reject button, to see whether either changes anything.
A banner that records a refusal and keeps tracking is worse than no banner — it is documented evidence that you asked and ignored the answer. Most sites have never been tested for it.
Observed from outside your site. It reports signals, not legal conclusions — anything we cannot establish is marked unverified and does not count against you.
How it works
Define your data purposes and retention periods. Takes less than five minutes.
Drop one script tag into your site. The banner appears automatically for your visitors.
Consents are recorded, rights requests are tracked, and your audit trail is ready.
Join businesses using DPDP Comply to protect their users' data and stay ahead of India's data protection law.
Get Started — It's FreeNo credit card required · Setup in under 10 minutes