Home / Adjacent engineering
Beyond DPDP
The engineering around DPDP
Personal data does not stop at consent screens. It flows into AI agents, vector databases, APIs, backups and cloud regions. Each of these carries DPDP duties of its own, and each needs engineering, not just policy. These are the adjacent pieces we build and test, always with the Act in view.
Privacy engineeringPrivacy engineering for DPDP: find personal data in databases, logs, backups and SaaS, map it, then automate consent, rights requests and deletion with proof.How we do it →AI governanceAI governance in India for AI systems and agents that use personal data: inventory, DPDP assessment, guardrails, human oversight and an audit trail.How we do it →AI red teamingAI red teaming in India for chatbots, copilots, RAG and agents: prompt injection, data leakage and agent permission tests, mapped to DPDP Rule 6 safeguards.How we do it →Data localisationData localisation India: what DPDP, RBI, SEBI and IRDAI require, and how we build Indian-region hosting, keys, backups and DR you can prove.How we do it →Data readiness for AIEnterprise data readiness for AI: quality, catalogues, governance and RAG pipelines built so DPDP access, rights and erasure reach every vector index.How we do it →API and supply chain securityAPI security India: find every API, fix broken object level authorisation, vault secrets, build an SBOM and secure CI/CD, mapped to DPDP Rule 6 safeguards.How we do it →Ransomware readinessRansomware readiness in India: immutable backups, tested restores and one runbook for CERT-In's 6-hour and DPDP's 72-hour reporting clocks.How we do it →
How these connect
One record, many places it can leak from.
Follow the red dot from our drawings. A customer's phone number is collected under a notice, copied into a data warehouse, embedded into a knowledge base, read by an AI agent, sent through an API to a vendor, and saved in tonight's backup. DPDP asks you to protect it, honour the person's rights and delete it everywhere it went. Each page here covers one of those places, how we engineer it, and which part of the law it serves.