From engagement to a considered assessment.
Speed with institutional rigour: no bureaucratic deliberation, no months of billable discovery.
Engagement
The matter is scoped with the partners who will actually run it.
- Direct consultation with Founding Partner
- Immediate execution of bilateral NDA
- Initial discovery on data architecture & statutory fiduciaries
Defined scope of work
Written, bounded and priced: no open-ended mandates.
- Granular milestone schedule with statutory boundaries
- Fixed, capped fee agreement, zero hidden hourly meters
- Specialist roster designated for the matter
Preliminary assessment
A considered reading of where the organisation stands today.
- Red-flag statutory vulnerability report
- Quantified DPDP exposure mapping (Sections 4 to 16)
- Actionable remedial pathway with clear ownership
From first call to signed engagement.
A clear, step-by-step process to assess your readiness, align with the right people and deliver a practical compliance action plan.
A fixed fee, defined deliverables, and work that begins with the first assessment.
Qualification
The goal of the first contact is to place the client in a tier and book the discovery call. Based on this conversation, you fill in our brief diagnostic.
Phase One engagement.
A Phase One engagement letter with a fixed fee, fixed dates and defined deliverables. Work begins on signature.
- 01Scope
- 02Exclusions
- 03Fee & payment
- 04Client duties
- 05Reliance
- 06Nature of advice
- 07Confidentiality & our own data handling
- 08Subcontracting
- 09IP
Five fixed steps.
So every report is comparable, and any team member can run it. A panel advocate reviews the role classification and the exposure register before the report is drafted.
Role classification
For each entity and each data flow: Data Fiduciary, Data Processor, or both. Flag Significant Data Fiduciary risk from volume, sensitivity and any government notifications.
DPDP Compliance Report with contract, relationship and obligation mapping, gap assessment, work order, optional specialists on panel with fee structure, NDA, engagement letter, payment details.
What arrives before any penalty.
A DPDP compliance report that shows where you stand, what to fix and how to get there, before risk turns into a penalty.
Executive summary
One page. Overall rating, top 5 risks, the deadline, the recommended option and its cost range.
DPDP Regulation, design & drafting.
Notices, consent language, policies, processing agreements and addenda, settled with independent advocates. Security baselines assessed; vendors and customers approached with amended terms.
DPDP readiness and implementation.
What was designed now changes how the organisation operates, layer by layer.
We create and conduct security practice and drills to ensure breach readiness and strengthen your organisation's data protection posture.
Breach response.
- 01 · 0HComplaint received / Grievance Officer
- 02 · 0HIntimation to the DPBI
- 03 · 12HNotification to the Data Principal
- 04 · 24HDPO sets up an audit
- 05 · 36HBoard meeting and handover of evidence
- 06 · 48HPermanent steps to prevent recurrence
- 07 · 60HCompany submits a detailed report
Ongoing governance.
Once the evidence file is with the board, the work becomes quieter and continuous.
- Support on requests and grievances
- Annual review / briefing
- Review of new vendors and contracts
- Regulatory watch
- Incident / breach response
- Policy and terms updates
Every mandate begins with one conversation, under confidentiality.