Frequently asked questions

Our questionnaires, scoring and AI assistance help us prepare analysis quickly and consistently. They do not decide anything. A qualified lawyer reviews every material finding, report and contract markup, and confirms it before it reaches you.

Our free tools give an instant, indicative view based only on what you enter. No lawyer has looked at it. It is not legal advice, a compliance certificate, or a statement that your organisation is or is not compliant. Your answers and any text you paste stay in your browser and are not sent to us.

Only once a formal engagement is in place. We first check for conflicts of interest, then send you an engagement letter stating the fee, the deliverable and the turnaround. Nothing on this website is legal advice until you have accepted that letter.

If you are starting DPDP compliance from scratch, the DPDP Readiness Programme. If you already run an ISO 27001 or GDPR programme, the DPDP Gap Overlay. If you have a privacy vendor or internal DPO and want a second opinion, the Independent Privacy Gap Review. For a data processing agreement or privacy clauses, the Privacy Contract & Vendor Review. For one contract, Single Contract Review; for contracts every month, the Contract Retainer. If you are unsure, the free DPDP Readiness Check is a good first step.

Paid, lawyer reviewed work is delivered within 3 to 5 business days. The clock starts once we have your payment, complete information and any evidence or documents we ask for, not when you first submit. On the Contract Retainer, the same timeline applies to each contract. Implementation work is scoped and timed individually.

By bank transfer or UPI to the account shown in your engagement letter and on your signed in dashboard, quoting your matter reference. We do not take card or other online payments. We never send or change our bank details by email; if you receive different details, call us before paying. Work begins once we confirm your payment has reached us.

If we decline a paid matter or it cannot begin, we refund your payment in full to the account it came from within 7 business days. Overpayments are refunded too. Our Refund Policy has the details.

Your engagement data and the files you upload are stored on servers in Mumbai, India, and are shown only to people signed in to your matter and to our team working on it. We delete evidence files 90 days after we deliver the final report, unless we are still working with you on implementation under the same engagement. Our Privacy Policy explains how we handle your information.

AI assistance is used only as an aid to our lawyers in preparing analysis and research. At this stage it is used manually by our reviewing lawyer, not through an automated system built into this platform, and identifying details are minimised or redacted where practical. AI never reaches a final legal conclusion, issues a certification or writes a final contract clause on its own. A qualified lawyer reviews and confirms everything before it reaches you.

No. Our reports set out lawyer confirmed findings and priorities. They are not a certification of compliance, a guarantee of any regulatory outcome, or a substitute for ongoing legal monitoring of your obligations.

Once a document or contract we prepare for you is approved and delivered, you own that final document. We keep ownership of the underlying master template, structure and methodology, and may reuse that structure for other clients.

The Digital Personal Data Protection Act, 2023 is India's law on how organisations collect and use digital personal data. The Digital Personal Data Protection Rules, 2025 set out how it works in practice, including notices, consent, breach reporting and data retention.

A finding is only as good as what supports it. Where a material finding depends on a policy, contract or record, a lawyer asks to see it before confirming the finding, so your report reflects what you actually have in place.

A lawyer must check for conflicts of interest before reading a contract. We check the other party first, usually within one business day, and then ask you to upload the contract.

Yes. Every contract we review is also checked for clauses that affect your DPDP obligations, such as how the other party handles personal data you share with it.