DPDP OS for Indian startups

Get DPDP-compliant before 13 May 2027

Helping startups become DPDP-ready before May 2027.

The fastest way for an Indian startup to become DPDP-ready — templates, workbook, registers, and a 90-day roadmap in one kit.

Full compliance is mandatory by 13 May 2027, penalties reach ₹250 crore per violation, and the Data Protection Board is already hearing complaints.

Deadline: 13 May 2027

Created after studying

  • DPDP Act, 2023
  • DPDP Rules, 2025 (notified 13 Nov 2025)
  • CERT-In directions & incident reporting
  • ISO 27001 documentation patterns

Your GDPR policy doesn't cover this.

DPDP requires standalone itemised consent notices, a named Grievance Officer, under-18 as the child threshold, and breach reports to the Board within 72 hours.

Consulting quotes come back at ₹3–5 lakh.

For most SMBs, 80% of that work is standardisable.

The Board is already live.

Phase 1 took effect 13 November 2025. Complaints can be filed today.

Inside DPDPKit

A DPDP compliance OS — not a folder of generic docs.

11 Word templates, an 8-tab Excel workbook, registers, and a 90-day roadmap — everything connected so you know what to do next.

DPDPKit compliance workbook dashboard showing gap progress, key dates, and register counts
Compliance workbook — dashboard
DPDP gap assessment spreadsheet with 50 requirements across governance, consent, security, and vendors
Gap assessment — 50 requirements
DPDP-aligned privacy policy Word template with drafting notes and data collection table
Privacy policy template
Breach and incident register with 72-hour Board reporting fields
Breach & incident register
90-day DPDP implementation roadmap with weekly tasks and deliverables
90-day implementation roadmap

Workbook tabs: Dashboard · Gap Assessment · Data Inventory · Consent Register · DSR Tracker · Breach Register · Vendor Register · 90-Day Roadmap

Free DPDP readiness check

50 questions, about 2 minutes. You get a score and your three biggest gaps named specifically.

Take the free readiness check

50 questions · about 2 minutes · instant results, no signup

DPDPKit — your DPDP compliance OS — ₹4,999

Not just documents — a connected system: templates, workbook, registers, and a 90-day roadmap so you always know the next step.

  • Privacy Policy (DPDP-compliant)
  • Itemised Consent Notice Template
  • Cookie and Tracking Consent Notice
  • Data Principal Rights Request SOP
  • Grievance Officer Appointment and Charter
  • Data Breach Notification SOP (72-hour Board reporting)
  • Data Processing Agreement (DPA) Template
  • Employee and HR Data Privacy Notice
  • Vendor and Third-Party Processor Checklist
  • Children's Data Processing Policy (under-18 threshold)
  • Data Retention and Deletion Schedule
  • 8-tab DPDP Compliance Workbook

What happens after payment?

  1. 1

    Payment

    Pay ₹4,999 via Razorpay — UPI, cards, or netbanking.

  2. 2

    Download instantly

    Get the Google Drive folder — zip, Start Here guide, and workbook.

  3. 3

    Customize

    Replace placeholders with your company name, systems, and Grievance Officer.

  4. 4

    Run gap assessment

    Score yourself in the workbook — dashboard tracks % complete.

  5. 5

    Implement

    Follow the 90-day roadmap tab week by week until May 2027.

Instant download after payment. GST invoice available on request.

11 years in product design, 50+ delivered projects through UXLaunch Lab, and this kit was drafted against the DPDP Rules notified on 13 November 2025 — not the January 2025 draft.

New to the Act? Read our DPDP compliance guide for Indian startups — who it applies to, what you need by May 2027, and how to start.

Common questions

Is this legal advice?

No — professionally structured templates aligned to the Act and the 2025 Rules. Have your counsel or CA review the customised output before you rely on it.

Is it current?

Drafted against the Rules notified 13 November 2025.

We're B2B, does DPDP apply?

Yes — employee data, lead data and customer data are all personal data under the Act.

How long does implementation take?

Most teams follow the kit's 90-day roadmap — typically 4–12 weeks depending on size and how much engineering work consent and rights flows need.

What if we're already ISO 27001?

Helps on security safeguards, but doesn't cover consent notices, rights handling, or Board breach reporting.