See where data goes.
Look at what information you collect, why you use it, which teams and systems handle it, and whether other service providers are involved.
DIGITAL PERSONAL DATA PROTECTION (DPDP)
Names, phone numbers and messages can be personal data when kept digitally. India’s Digital Personal Data Protection (DPDP) Act recognises people’s right to protect it and the need to use it lawfully.
See where personal data goes. Bring the right people together. Keep a clear record of decisions and next steps.
14 short questions · see your notes before sharing details · print them here or request an email copy. This starts a discussion; it cannot tell you whether you follow the law.
The exact rules depend on what your business does. The law has exceptions, and different rules start on different dates.
Pramana helps business, privacy, legal and technology teams talk through how personal data is used and keep useful notes on their decisions.
Look at what information you collect, why you use it, which teams and systems handle it, and whether other service providers are involved.
Help business, privacy, legal, risk and technology teams see the same facts and discuss who is responsible and what remains unclear.
Keep a clear note of decisions and next steps so your team can review them later. The result depends on the information your team provides.
Pramana helps your team organise its work. It cannot say that you comply with the law, replace qualified legal advice or take away your team’s responsibility.
A simple way to begin: Write down how you use personal data → check the official law and when its rules start → ask the right people to decide open questions → keep a note of decisions and next steps. See the illustrative sequence →
The full confirmation remains private. This page publishes only the scope and conclusion intended for prospective customers and qualified diligence reviewers.
An outside legal reviewer checked our public claims and plans for limited client discussions. This is not government approval or a promise that using Pramana makes a business compliant.
Review dated: 16 September 2026
Scope: public-facing representations, commercial model, deployment architecture, applicable Indian law or notified rules, and relevant regulatory requirements.
Subject to the confirmation’s assumptions, qualifications, and implementation of any mandatory changes communicated during review, it supports controlled B2B outreach, product demonstrations, pilot discussions, founding-customer engagements, and commercial discussions in relation to Pramana.
Boundary: This is not regulatory approval, statutory compliance certification, or a guarantee that every deployment satisfies every legal requirement. Pramana does not replace legal counsel.
Full confirmation: Available for qualified diligence requests, subject to confidentiality.
A website, customer list, hiring form, payment flow or help desk may involve digital personal data. The questions can include what you collect, how you use and share it, how long you keep it and when you delete it. This can involve ordinary apps and business systems as well as AI or agents.
These are examples to help you start thinking. They do not mean the Act applies to every business or activity.
Start with our plain-English guide. Then check the official Act, Rules, start-date notices and later government updates that matter to your situation.
Tell the Annapurna team what your business does and what questions you have.