Run your DPDP programme, and prove every step
DataVow keeps your notices, consent and rights requests in one register, answers your systems before they use personal data, and records each step so anyone can check it.
Evidence pack
DP-7Q2K-X4M9
Meridian Health · Patient app
- 12 MarConsent givenAppointment reminders · notice v3, HindiGivenGiven
- 02 AprPurpose checkMarketing SMS · no consent for this purposeDeniedDenied
- 09 MayConsent withdrawnThrough the privacy portalWithdrawnWithdrawn
- 09 MayErasedSalesforce 3 records · Snowflake 12 rowsVerifiedVerified
- 09 MayProcessor toldMailroom, email deliverySentSent
Every duty under the Act, in one register
The workspace follows the order a privacy programme runs in, from what you hold to what you can prove. Built for India's Digital Personal Data Protection Act, 2023.
01
Set up
Fiduciary profile
Your company, your contacts and the officer in charge
Data and retention
What personal data you hold, and for how long
Purposes
Why you use it, each with its lawful basis
Processing activities
Everything you do with it, owned and complete
Data flows
Where it moves, and what moved that nobody recorded
Systems
What runs, read from your ServiceNow CMDB
Languages
English and the 22 languages of the Eighth Schedule
02
Tell and ask
Notices
Published only once someone other than the author approves
Consent
Who agreed to what, from your website, your apps and the portal
Purpose checks
Your systems ask before they use personal data, and get an answer
03
Respond to people
Rights requests
Access, correction and erasure, verified and on a deadline
Erasure
Retention rules, legal holds, and deletions checked by a second query
Connectors
Salesforce, HubSpot, Zoho, Snowflake, BigQuery and your own databases
04
Manage risk
Processors
Vendors handling your data, assessed before anyone approves them
Breaches
From a Splunk, Sentinel or Purview alert to the 72-hour report
Children
Verified guardians and the Fourth Schedule exemptions
Cross-border
Data leaving India, and requests from government
SDF duties
Impact assessments, independent audits and algorithm checks
05
Prove and report
Readiness
A score from your own answers, with the gaps and a roadmap
Connected systems
Scan Salesforce, HubSpot, Zoho, SAP and Workday for personal data
AI helpers
Drafts and checks a person approves, off until you turn them on
A record that cannot be quietly changed
Every event goes into an append-only ledger and carries the hash of the event before it, so changing one breaks the chain. One person's whole story comes out as an evidence pack, fingerprinted with SHA-256 and signed with your key.
Append-only, in the database
No one can edit or delete an event, the database owner included
Erasure you can show
A deletion in a connected database is checked by a second query, and the receipt can be recomputed by anyone
Readiness on paper
Your score, gaps and roadmap as a PDF report
Evidence ledger
09 May 2026
- 18,41210:02privacy.rights_request.received3a91…c7e0prev d06b…a412
- 18,41310:06privacy.rights_request.verifiedb2f4…19d2prev 3a91…c7e0
- 18,41911:40privacy.erasure.approved7c08…e55bprev b2f4…19d2
- 18,42211:41privacy.rights_task.completede41d…02afprev 7c08…e55b
- 18,42311:41privacy.erasure.completed5d77…8a10prev e41d…02af
How ready are you for the DPDP Act?
Ten questions, about five minutes. You get an indicative score and where to start. No sign-up.