Resources
Straight answers on DPDPA, GRC and cyber compliance
Guides, analysis and tools for the people who have to make Indian compliance work. Each page cites its sources, shows the numbers behind the claims, and says plainly where something is our judgement.
Start here
DPDPA compliance in India: what you have to do, and by when
India's data protection law is no longer a draft.
14 min read →Pillar guideGRC explained: governance, risk and compliance without the jargon
GRC is three old ideas joined together: who decides, what could go wrong, and are we following the rules.
12 min read →Pillar guideCyber security compliance in India: which rules apply to you
India has no single cyber security law.
9 min read →Tools and analysis
DPDPA compliance checklist: 25 things to check before 13 May 2027
Work through the checklist, tick what you can honestly evidence, and see how ready you are.
6 min read →AnalysisDPDPA penalties explained: what is at stake and how the Board decides
The headline figure is ₹250 crore.
7 min read →ComparisonDPDPA vs GDPR: the differences that matter in practice
If you already comply with the GDPR, you have a head start on the DPDPA, but not a finish.
8 min read →Free downloads
The DPDPA Readiness Playbook
From "where is our data?" to "here is our evidence" in 90 days. A working document for the people who will do the job.
Free download · 8 pages →Buyer's guide · PDFThe GRC Buyer's Guide
How to decide whether you need a GRC platform, what to ask, and how to test it before you sign.
Free download · 6 pages →Reference · PDFThe India Cyber Compliance Map
Which rules apply to whom, the clocks that start when you notice an incident, and the evidence to keep.
Free download · 5 pages →Book a walkthrough and we will work from your frameworks and systems.