®
What we do
- Regulatory mapping: which central and state laws, licences and registrations apply to your activities
- Compliance calendars with owners and due dates, so nothing is missed
- Data protection readiness under the DPDP Act and DPDP Rules, 2025: data mapping, notices, consent, grievance handling and processor contracts
- Cyber security governance: incident response plans and CERT-In six-hour reporting
- Policies: code of conduct, information security, acceptable use, anti-bribery, workplace policies
- Vendor and third-party compliance reviews
- Board-level compliance reporting and periodic health checks
Why it matters
Most compliance failures in India are not deliberate. They happen when a filing date passes unnoticed, a registration lapses, or a new rule takes effect without anyone owning it. Penalties, late fees and blocked transactions follow. A clear calendar with named owners prevents most of this.
Our team brings hands-on experience of data centres and cyber security, so data protection and incident response advice is grounded in how systems actually work.
How an engagement runs
- Discovery: a short questionnaire and call about your business, locations, data flows and existing filings.
- Compliance map: a written register of applicable obligations, ranked by risk.
- Fix and build: we close gaps and set up the calendar, policies and controls.
- Stay current: on retainer, we track changes and remind owners before each deadline.
Common questions
Does the DPDP Act apply to companies outside India?
It can. It applies to processing of digital personal data outside India where that processing is connected with offering goods or services to people in India.
How quickly must a cyber incident be reported in India?
Under the CERT-In Directions of April 2022, specified cyber incidents must be reported to CERT-In within six hours of being noticed.
Can you act as our ongoing compliance team?
Yes. Many clients use us on a monthly retainer to run their compliance calendar, prepare filings with the relevant registered professionals and report status to management.
Tell us what you are working on. We reply within one business day with next steps and a fixed-fee or retainer proposal where possible.
Jurisdiction: IndiaLast reviewed: 26 October 2026General information, not legal or investment advice