🛡 DPDP · CERT-In · India

Know where you stand on DPDP and CERT-In,
clause by clause.

Upload your privacy notice, policies and contracts, or answer questions in your own language. Every clause of the DPDP Act, the DPDP Rules, the CERT-In Directions and the 15 CERT-In controls for MSMEs gets a verdict with the evidence quoted, and a pack you can hand to an auditor. Readiness information, not legal advice.

Check your readiness → See how it works

What It Checks

Four texts. 398 clauses. Nothing summarised away.

Most readiness tools score you on forty questions. This one reads the law the way an auditor does: every section, rule, schedule item, direction and control is a line in your report, with the gazette text one click away.

📖

DPDP Act 2023 and DPDP Rules 2025

Notices, consent, security safeguards, breach reporting, children's data, processor contracts, retention and the rights of your customers and staff. Most duties apply from 13 May 2027; consent manager rules from 13 November 2026.

⚡

CERT-In Directions 2022

Binding on every business since 2022, and on MSMEs since 25 September 2022: incident reporting within six hours, logs kept in India for 180 days, clocks synced, a named point of contact. The part most owners have never heard of.

🔒

CERT-In 15 controls for MSMEs

The recommended baseline from September 2025: asset inventory, access control, MFA, patching, backups, logging, incident handling, training, vendor risk and more, checked control by control and recommendation by recommendation.

How It Works

Three steps, about ninety seconds of waiting.

No consultant, no workshop, no spreadsheet. The check runs on your own documents and your own answers.

Upload or answer

Drop in your privacy notice, IT and HR policies, vendor contracts and incident plan, or paste the link to your live notice. No documents yet? Answer the questions instead, in Hindi, Hinglish, English or eight other Indian languages.

Every clause gets a verdict

Met, partly met, not met, not applicable, or evidence needed. A verdict of met only ever rests on text quoted word for word from your own document, and a second model checks every one before you see it.

Fix the right things first

A prioritised fix list by legal weight and date, the three breach clocks side by side, and a PDF pack with file hashes and evidence references that a CERT-In empanelled auditor can work from.

Compliance Check report: readiness per source, the three breach clocks and the start of the fix list

The three breach clocks side by side: CERT-In six hours, DPDP without delay, DPDP 72-hour report

The interview in Hindi: one question at a time with Yes and No buttons

Who It Is For

Businesses with 10 to 500 people and someone else's data.

If you hold PAN, Aadhaar, health records, student details, customer addresses or payment data, these texts already apply to you.

CA and accounting firms

Client PAN, bank and financial data on every desk, and clients who will soon ask what you do to protect it.

Clinics, hospitals and labs

Health records are the most sensitive class of personal data the Act covers, and ABDM is pushing records online.

D2C brands and online sellers

Consent on every form and checkout, cookie notices, and vendors who handle your customer data for you.

Exporters

Buyers in the EU and UK ask for security and privacy evidence before they sign. The pack answers the question.

Coaching centres and edtech

Most of your users are under 18. Verifiable parental consent is a duty, with only narrow exemptions.

IT and services firms

Your enterprise customers run privacy due diligence on you. Arrive with the answers already written.

Plans

Two ways to start. Both in rupees, both cancel any time.

Prices exclude 18% GST. Hire it like any other Syentrix agent and cancel from your dashboard.

Interview

Compliance Check (interview) — ₹1,499 a month

Answer questions in your language and get the clause-by-clause readiness report for the DPDP Act, the DPDP Rules and the CERT-In Directions. No uploads, no PDF pack. One run per check, two checks a month.

Start with the interview →

Full

Compliance Check — ₹5,999 a month

Everything in the interview, plus document uploads, the 15 CERT-In MSME controls, the auditor PDF pack with hashes and evidence references, and re-runs as your documents improve. Ten checks a month.

Check your readiness →

Then

Hand the pack to an auditor

A CERT-In empanelled auditor can run the formal baseline audit from your pack. We do not audit, and we do not give legal advice; the pack is built to make both faster.

Questions

Straight answers.

Is this a legal opinion or a certificate?

No. It is readiness information. Every clause links to the official gazette or CERT-In text, and every verdict quotes the evidence it rests on. For a formal audit, hand the pack to a CERT-In empanelled auditor; for legal advice, speak to an advocate.

When do the DPDP duties start?

The Rules were notified on 13 November 2025. Consent manager rules apply from 13 November 2026, and most other duties apply from 13 May 2027. The report shows the date on every clause.

Does CERT-In apply to a small business?

The 2022 Directions bind every body corporate, including firms and sole proprietorships, and have applied to MSMEs since 25 September 2022. The 15 controls are recommended, not mandated, and the report says which is which.

What happens to my documents?

Private storage in Mumbai, 90 days by default (choose 7 to 365), deleted on request, never used for training unless you ask in writing. Syentrix acts as a Data Processor on your instructions.

Can I use it in Hindi?

Yes. The interview, the report and the fix list follow the language you choose on syentrix.com: Hindi, Hinglish, English and eight more Indian languages. The auditor pack is in English.

How accurate is it?

A verdict of met can only rest on text quoted word for word from your document, and an independent model re-checks every one. Where the documents are silent, the report says evidence needed rather than guessing.

Know where you stand on DPDP and CERT-In, clause by clause.