DPDP across your organisation.With experts alongside.
Governance Suite runs the programme in every team and location. Your dedicated privacy expert, quarterly reviews, training and an annual audit make sure it keeps up with your business and the law.
From ₹1 lakh a month or ₹11 lakh a year, plus GST. Quoted for your organisation.
Built by data protection lawyers and cybersecurity experts.
Nilgiri Wellness
Whole organisation · Snapshot of 3 Nov 2026, 09:00 IST
72/100
ComplyZero Readiness Score
Moderate
Much of your recorded privacy work is in place, with clear gaps to close.
The six areas.
Reviewed with your privacy expert
Your dedicated privacy expert.
Get practical DPDP guidance from a specialist who understands your organisation, with direct access through a Slack channel with our team.
- One specialist who knows you.
- The same person learns your locations, systems and decisions, so you never explain your business twice.
- The whole team behind them.
- Questions that need a data protection lawyer or a security engineer reach one, through the same channel.
- Answers you can act on.
- Guidance tied to the records in your workspace, not a memo about the Act in general.
Vikram Iyer IT, Nilgiri Wellness
Our new booking app wants to send WhatsApp reminders. Does the consent patients gave at reception cover that, or do we ask again?
Your privacy expert ComplyZero
Appointment reminders fit the purpose patients agreed to when they booked, so you're covered. Offers are a different purpose. If the app will send those, publish a separate purpose and ask for it on its own. Suggested wording below.
Suggested purpose for Consent Hub
Offers on WhatsApp
“We'd like to send you offers and health tips on WhatsApp. You can stop them at any time.”
Wording for your review
Vikram Iyer
Perfect. Publishing it with the new form today.
Expert help, all year. Not a one‑time workshop.
Laws move, teams change and new systems arrive. Each service ends in something your team can use.
Quarterly privacy and regulatory reviews
Meet with our privacy experts each quarter to understand relevant regulatory changes, discuss their impact on your business and agree what needs attention. Includes a written summary of recommended actions.
- A private 60-minute session, every quarter
- Your questions and open priorities, on the agenda
- A written summary of recommended actions
Quarterly privacy review
Q1 2027 · Nilgiri Wellness
What changed
- The Rules' main duties start on 13 May 2027: notices, consent, safeguards and breach reporting.
- A breach now needs a detailed report to the Board within 72 hours.
What it means for you
- Your patient notice needs the itemised format before May.
- The Kochi incident steps stop at the first alert. Add the 72-hour report.
What needs attention
- Publish the revised notice, February
- Add the report step in Breach Desk, this month
- Refresher for front desk staff, March
agreed on the call
DPDP training workshop
A live, practical workshop for your team, covering how to handle personal data, collect consent, respond to customer requests and recognise data incidents.
DPDP at work
A workshop for the people who handle personal data every day
- Handling personal dataWhich of these belongs in a shared folder?
- Collecting consentA walk-in wants to skip the form. What now?
- Answering a customer requestSomeone asks for everything you hold on them.
- Recognising an incidentA laptop is missing. Who do you tell, and when?
Annual DPDP audit, on-site or remote
Our data protection lawyers and cybersecurity experts review your organisation's practices and supporting evidence, on-site or remotely. You receive a written findings report and a prioritised action plan.
- On-site
- We review practices where the work happens.
- Remote
- Our team reviews the evidence you supply.
Vendor agreements
- What we saw
- Five of twelve vendors who receive patient data have no processing terms on file.
- Evidence
- Vendor Register export, contracts folder, procurement interview.
- Action
- Sign terms with the payment and SMS providers first. Record review dates in the Vendor Register.
One programme, every location.
Each location runs its own requests, records and incidents. Head office sees the whole organisation in one view, and your expert works from the same records.
- Locations and teams, each with their own queues and people.
- One readiness view across the organisation, with the gaps named.
- Request and incident clocks that keep running when an office is on leave.
The controls your evaluators ask for. Stated precisely.
- Single sign-on with your identity provider; your roles keep deciding what each person can do.
- Roles and permissions for sensitive actions, kept even after sign-in.
- Connectors to your databases, Google Workspace, Microsoft 365, Zoho CRM, HubSpot, Shopify and WhatsApp Business, sized to your quotation.
- API keys with scope, expiry, revocation and IP restrictions.
- Your own domain for hosted pages and request forms.
Support with clear response times.
Work with your dedicated privacy expert through Slack during business hours. Critical platform support is available around the clock, with an initial response within one hour.
| Request | First response | Coverage |
|---|---|---|
| Critical platform incidentComplyZero is unavailable or unusable for your organisation | Within 1 hour | 24/7, holidays included |
| Major product issueNo workable alternative | Within 4 business hours | Business hours |
| Routine product or account question | Within 8 business hours | Business hours |
| Questions for your privacy expert | Within 4 business hours | Business hours |
Business hours are Monday to Friday, 10 am to 7 pm IST, with holidays set in your support calendar.
Getting started.
- Agree the scope.Locations, websites, connected systems and services, written into your quotation.
- Set up together.Guided Setup for the organisation with your privacy expert, and a setup review in the first 30 days.
- Set the priorities.Your first quarterly review turns the Readiness Report into a plan for the months ahead.
Procurement gets what it needs: a contract, GST invoices, a data processing agreement and straight answers to your security questionnaire.
The detail.
What does an Enterprise quotation cover?
Your locations, websites, connected systems, Discovery data and Deep Scan pages, single sign-on, and the expert services: your dedicated privacy expert, quarterly reviews, the training workshop and the annual audit with its format. Enterprise starts at ₹1 lakh a month or ₹11 lakh a year, plus GST.
Is the privacy expert available around the clock?
No. Your privacy expert answers during business hours, Monday to Friday, 10 am to 7 pm IST. Critical platform incidents are covered 24/7, holidays included.
What counts as a critical platform incident?
ComplyZero being unavailable or unusable for your organisation. You get a human response within one hour, and an update at least every two hours until it is resolved.
Are these resolution times?
No. They are first-response times: when a person on our team picks up your request. Fixing an issue or completing a detailed review can take longer, and we tell you what to expect.
How do on-site and remote audits differ?
On-site, our team reviews your practices at your premises. Remote, our team reviews the evidence you supply. Both end in a written findings report and a prioritised action plan. The format and locations are agreed in your quotation.
Does the audit certify us as compliant?
No. It tells you plainly where you stand against the DPDP Act, what is missing and what to fix first. It is an expert review, not a certificate.
Is our data handled differently on Enterprise?
No. Every plan gets the same security: data stored in India, encryption in transit and at rest, and the controls on our Security page. Enterprise adds single sign-on and the capacity and services in your quotation.
Bring your organisation chart.
A walkthrough built around your teams, your locations and the help you need. We'll show you the product and how your privacy expert would work with you.