Run DPDP foryour whole business.No privacy team needed.

Where personal data lives, who asked for what, which vendors touch it, how long you keep it, and what to do when something goes wrong. Every piece has an owner, a history and a next step, so the person handed DPDP knows exactly what to do on Monday.

Built by data protection lawyers and cybersecurity experts.

Know where personal data is used.

Connect the systems you already run, your databases, Google Workspace, Microsoft 365, Zoho CRM, HubSpot, Shopify, WhatsApp Business, and Discovery does the looking. Ladon, our own detection models, finds personal data where nobody remembered putting it, names, phone numbers, Aadhaar and UPI details in files, tables and mailboxes, and shows you.

Scans run on the schedule you set, daily if you like. A spreadsheet of customer numbers that lands in a shared drive on Tuesday is flagged on Wednesday, with where it is and what to do, long before it is anyone else's problem. Your team reviews every finding before it goes on the record, so the picture is accurate and it is yours.

Discovery and Ladon are part of Governance Suite. Connectors vary by plan, and more arrive with every release.
Processing activity

Membership management

Reviewed 2 Oct
Personal data
NamePhoneEmailDate of birthHealth notes
Purpose
Run memberships, bookings and renewals
Sources
Membership softwareFront desk sign-up forms
Vendors
Email providerPayment gateway
Retention
3 years after membership ends
Owner
FKFarah Khan
Data DiscoveryGoogle Workspace
old-member-list.xlsxShared drive · Scanned 06:02 · last edited Mar 2023
  • Phone numbers412
  • Dates of birth380
  • Email addresses297

Looks like membership data. Needs review.

A customer asks. Your team knows what happens next.

Someone writes in asking what you hold about them, or wants it deleted, or has a complaint. Instead of panic, there is a form, a queue and a clock. Verification, assignment, review, response, each step logged and each deadline in view.

Because your sources are already connected and mapped, finding what you hold about one person is a lookup, not a week of emails to six colleagues. Everyone can see who has it, what is due, and what has already happened.

REQ-1049

Correction request

Checking identity
Requester Kavya ShettyOwner Not yet assignedTarget Due in 6 days
  1. 9 Oct, 10:12
    Request received through the request portal

    “Please correct my contact details.”

    Kavya Shetty · recorded

Consent, wherever you meet people.

Not every customer meets you on a website. Consent Hub collects consent where it actually happens: a QR poster at the counter, a kiosk, staff at a branch or in the field, a paper form, and your own app or website once people sign in.

Every channel lands in one record per person, with the choices, the notice shown and where it came from. You can say exactly what someone agreed to, when and where, and your systems can check before a campaign goes out.

  • A QR code at the desk. Visitors scan it to open your hosted form. You don't need a website of your own.

  • The notice and choices, on their own phone. In the language they read, before they decide.

  • Or entry with your staff's help. The same form on a tablet at the counter.

  • A receipt for every submission. The choices, the notice shown and the time, kept with the record.

Keep the ongoing responsibilities visible.

DPDP does not end when setup does. Systems change, vendors change, people leave. The decisions, follow-ups and records live where your team will actually find them.

Know which vendors handle personal data.

Who touches your data, under which agreement, and when they were last reviewed, all on one record.

  • Email providerReview 18 Oct
  • Payment gatewayAgreement signed
  • Booking softwareAgreement missing

Make retention decisions explicit.

Decide how long each kind of data stays, record it against the processing it belongs to, and manage how long ComplyZero keeps your supporting evidence.

  • Membership recordsKept 3 years after membership endsProcessing
  • Request files in ComplyZeroRemoved after 2 yearsLegal hold off
  • Next cleanup on 1 Nov waits for your confirmation

Handle incidents in Breach Desk.

When something goes wrong, the facts, decisions and notices go in one place, with who is doing what next. Calmer than a group chat at midnight.

  1. 09:10FactFront desk laptop reported missing
  2. 11:30DecisionNotify affected members
  3. 16:05CommunicationNotice drafted for review

Your evidence shouldn't need a search party.

When an auditor, a customer or your own board asks, you open the Evidence Vault. You do not piece it together from inboxes. Consent exports leave it sealed, and whoever receives one can check it themselves, free.

Download a Readiness Report for an internal review or a conversation with an auditor. It shows the progress and the gaps, honestly.

Consent receiptOC-2231
Recorded
14 Oct 2026, 10:42:18 IST
Collected at
Front desk, staff-assisted
Notice
Version 4, shown in Hindi. The exact wording is kept with the record.
Choices
Membership updates AllowedHealth tips DeclinedOffers Declined
Sealed when recorded

Set up with help. Run it with your team.

Guided Setup and product support come with Governance Suite. You will not open an empty workspace alone: we help you configure it, add your first information and run a real flow end to end.

Coordinating across teams or locations? Explore Enterprise

  1. Choose a starting point.Pick the systems, collection points and responsibilities to organise first. Not everything. Just the first thing.
  2. Set up the essentials.Add your information, switch on the notices and request forms you need, and bring in the people responsible.
  3. Put it to work.Run a real request through and look at the history it leaves behind. That is the moment it clicks.
Your team
  • Supplies the business facts
  • Authorises connections
  • Reviews decisions
ComplyZero
  • Helps configure your workspace
  • Helps your team use ComplyZero

Your team supplies the business facts, authorises connections and reviews decisions. We make sure ComplyZero is set up right and that you know how to use it.

Before you put it to work.

Can we use Governance Suite without a website?

Yes. It is for the whole business: Consent Hub for the counter and the field, customer and employee requests, data records and vendors. Hosted request forms and QR collection give people a way in even if you have no website at all.

Do we need to connect all our systems before starting?

No. Start with manual records and connect systems when it helps. Discovery shows what it found and how much it covered; your team decides what goes on the record.

Who on our team would use it?

Someone to coordinate: an operations, legal, IT or privacy lead. Colleagues join for the parts they own. Guided Setup gets the first configuration right.

Does Governance Suite include website consent banners?

Website Consent is the separate product for website notices, visitor choices and consent records. Governance Suite runs everything else. Most businesses with a website end up with both.

Does a good Readiness Score mean we're legally compliant?

It is an honest operational view of the work recorded in ComplyZero, gaps included. It tells you how far along you are. It is not a legal certificate, and we will not pretend otherwise.

Is the complete DPDP audit included?

The complete DPDP Audit is a paid add-on. Guided Setup and product support are included with Governance Suite; the audit is purchased separately.

See how Governance Suite would work for your business.

A walkthrough with a privacy expert, built around how your business handles personal data. Bring your messiest question.