India's Digital Personal Data Protection Act applies to every business that holds customer data — which means yours. Shield translates it: score, audit, build, uphold.
Four calm months of work instead of four scrambled ones.
You will read frightening penalty numbers elsewhere. We won't use them, because a maximum penalty written for a data giant tells a business your size nothing useful.
What we will tell you: what the law actually requires of a business your size and what the gap costs in your own numbers — a key account stalled on a compliance questionnaire, an overseas buyer who asked first and moved on. Then you decide.
Eight yes/no checks you answer yourself. Each explains the risk, how to test it, and the fix.
A formal gap assessment: what personal data you actually hold, where it sits, who touches it, and what's missing.
Consent capture on your website, a data-principal request process, policies your customers can read, and documentation that stands up to a question.
Kept current as the rules evolve: reviews, updated notices, renewal documentation, and a breach-response process ready before you need it.
Pricing is confirmed after the audit, because scope depends on what you actually hold. Existing clients see their own pricing in Nivaran Desk.
Almost certainly yes. The Act is about personal data, not company size — customer names, phone numbers, employee records, CVs, enquiry forms, WhatsApp order lists.
What genuinely varies is how much you must do. A 20-person manufacturer with an enquiry form is not held to the standard of a company processing lakhs of records.
The Scorecard is built to tell you which end you're at.
Overseas buyers and large Indian customers now send privacy questionnaires before they place orders.
Being unable to answer doesn't produce a fine — it produces silence, and a shortlist you're not on.
The Exporter Privacy Pack covers DPDP for India plus GDPR-aware readiness for EU and US buyers — the version of this question your customers actually ask.
Every industry has moments where the ground shifts and the businesses that moved early spend the next decade ahead.
Data protection is one of those moments — quiet right now, and quiet is exactly when it is cheap to be ready.
The businesses that get this done early won't just avoid trouble. They will say so, to every customer and every overseas buyer while their competitors are still asking their CA what DPDP means.
Eight questions, answered by you, with the risk and the fix explained at every step. Nothing to install, no sales call.
