Run DPDP foryour whole business.No privacy team needed.
Where personal data lives, who asked for what, which vendors touch it, how long you keep it, and what to do when something goes wrong. Every piece has an owner, a history and a next step, so the person handed DPDP knows exactly what to do on Monday.
Connect the systems you already run, your databases, Google Workspace, Microsoft 365, Zoho CRM, HubSpot, Shopify, WhatsApp Business, and Discovery does the looking. Ladon, our own detection models, finds personal data where nobody remembered putting it, names, phone numbers, Aadhaar and UPI details in files, tables and mailboxes, and shows you.
Scans run on the schedule you set, daily if you like. A spreadsheet of customer numbers that lands in a shared drive on Tuesday is flagged on Wednesday, with where it is and what to do, long before it is anyone else's problem. Your team reviews every finding before it goes on the record, so the picture is accurate and it is yours.
Discovery and Ladon are part of Governance Suite. Connectors vary by plan, and more arrive with every release.
Processing activity
Membership management
Reviewed 2 Oct
Personal data
NamePhoneEmailDate of birthHealth notes
Purpose
Run memberships, bookings and renewals
Sources
Membership softwareFront desk sign-up forms
Vendors
Email providerPayment gateway
Retention
3 years after membership ends
Owner
FKFarah Khan
Data DiscoveryGoogle Workspaceold-member-list.xlsxShared drive · Scanned 06:02 · last edited Mar 2023
Phone numbers412
Dates of birth380
Email addresses297
Looks like membership data. Needs review.
A customer asks. Your team knows what happens next.
Someone writes in asking what you hold about them, or wants it deleted, or has a complaint. Instead of panic, there is a form, a queue and a clock. Verification, assignment, review, response, each step logged and each deadline in view.
Because your sources are already connected and mapped, finding what you hold about one person is a lookup, not a week of emails to six colleagues. Everyone can see who has it, what is due, and what has already happened.
REQ-1049
Correction request
Checking identity
Requester Kavya ShettyOwnerNot yet assignedTargetDue in 6 days
9 Oct, 10:12
Request received through the request portal
“Please correct my contact details.”
Kavya Shetty · recorded
Consent, wherever you meet people.
Not every customer meets you on a website. Consent Hub collects consent where it actually happens: a QR poster at the counter, a kiosk, staff at a branch or in the field, a paper form, and your own app or website once people sign in.
Every channel lands in one record per person, with the choices, the notice shown and where it came from. You can say exactly what someone agreed to, when and where, and your systems can check before a campaign goes out.
NILGIRI WELLNESSScan to choose how we use your detailsहिन्दी · English · தமிழ்
A QR code at the desk. Visitors scan it to open your hosted form. You don't need a website of your own.
nilgiriwellness.in/form
सहमति फ़ॉर्महिन्दी
NOTICE · V4
हम आपकी जानकारी का उपयोग कैसे करते हैं
सदस्यता की जानकारी
स्वास्थ्य सुझाव
ऑफ़र
सहेजें
The notice and choices, on their own phone. In the language they read, before they decide.
Consent Hub / Assisted entry
VISITORMeena KrishnanNOTICE SHOWNVersion 4 · Hindi
Membership updates
Health tips
Offers
FKFarah KhanSave
Or entry with your staff's help. The same form on a tablet at the counter.
Consent receiptOC-2231
RECORDED
14 Oct 2026, 10:42 IST
COLLECTED AT
Front desk, staff-assisted
NOTICE
Version 4, shown in Hindi
Membership updatesAllowed
Health tipsDeclined
OffersDeclined
A receipt for every submission. The choices, the notice shown and the time, kept with the record.
Keep the ongoing responsibilities visible.
DPDP does not end when setup does. Systems change, vendors change, people leave. The decisions, follow-ups and records live where your team will actually find them.
Know which vendors handle personal data.
Who touches your data, under which agreement, and when they were last reviewed, all on one record.
Email providerReview 18 Oct
Payment gatewayAgreement signed
Booking softwareAgreement missing
Make retention decisions explicit.
Decide how long each kind of data stays, record it against the processing it belongs to, and manage how long ComplyZero keeps your supporting evidence.
Membership recordsKept 3 years after membership endsProcessing
Request files in ComplyZeroRemoved after 2 yearsLegal hold off
Next cleanup on 1 Nov waits for your confirmation
Handle incidents in Breach Desk.
When something goes wrong, the facts, decisions and notices go in one place, with who is doing what next. Calmer than a group chat at midnight.
09:10FactFront desk laptop reported missing
11:30DecisionNotify affected members
16:05CommunicationNotice drafted for review
Your evidence shouldn't need a search party.
When an auditor, a customer or your own board asks, you open the Evidence Vault. You do not piece it together from inboxes. Consent exports leave it sealed, and whoever receives one can check it themselves, free.
Download a Readiness Report for an internal review or a conversation with an auditor. It shows the progress and the gaps, honestly.
Consent receiptOC-2231
Recorded
14 Oct 2026, 10:42:18 IST
Collected at
Front desk, staff-assisted
Notice
Version 4, shown in Hindi. The exact wording is kept with the record.
9 Oct, 10:12Received through the request portalKavya Shetty
9 Oct, 10:31Identity verified with a one-time codeComplyZero
9 Oct, 10:40Assigned to Ananya RaoAnanya Rao
10 Oct, 16:22Correction reviewed and madeFarah Khan
10 Oct, 16:48Response sentAnanya Rao
DPDP Readiness Report14 Oct 2026
56/ 100Developing
Consent management85
Privacy notice90
Request readiness67
Data inventory77
Vendor management70
Security governance75
Scope: the privacy work recorded in ComplyZero for Nilgiri Wellness, with its gaps and limits. Self-declared areas are shown, not counted.
Set up with help. Run it with your team.
Guided Setup and product support come with Governance Suite. You will not open an empty workspace alone: we help you configure it, add your first information and run a real flow end to end.
Choose a starting point.Pick the systems, collection points and responsibilities to organise first. Not everything. Just the first thing.
02
Set up the essentials.Add your information, switch on the notices and request forms you need, and bring in the people responsible.
03
Put it to work.Run a real request through and look at the history it leaves behind. That is the moment it clicks.
Your team
Supplies the business facts
Authorises connections
Reviews decisions
ComplyZero
Helps configure your workspace
Helps your team use ComplyZero
Your team supplies the business facts, authorises connections and reviews decisions. We make sure ComplyZero is set up right and that you know how to use it.
Before you put it to work.
Can we use Governance Suite without a website?
Yes. It is for the whole business: Consent Hub for the counter and the field, customer and employee requests, data records and vendors. Hosted request forms and QR collection give people a way in even if you have no website at all.
Do we need to connect all our systems before starting?
No. Start with manual records and connect systems when it helps. Discovery shows what it found and how much it covered; your team decides what goes on the record.
Who on our team would use it?
Someone to coordinate: an operations, legal, IT or privacy lead. Colleagues join for the parts they own. Guided Setup gets the first configuration right.
Does Governance Suite include website consent banners?
Website Consent is the separate product for website notices, visitor choices and consent records. Governance Suite runs everything else. Most businesses with a website end up with both.
Does a good Readiness Score mean we're legally compliant?
It is an honest operational view of the work recorded in ComplyZero, gaps included. It tells you how far along you are. It is not a legal certificate, and we will not pretend otherwise.
Is the complete DPDP audit included?
The complete DPDP Audit is a paid add-on. Guided Setup and product support are included with Governance Suite; the audit is purchased separately.
Front desk consentReception deskCollect consentFK
Membership softwareThe office laptopAdd a noticeRM
Paper sign-up formsFiling cabinet, since 2019Set retentionAR
Consultation notesHealth dataLimit accessFK
Shared driveFound by DiscoveryReview exportsVI
Employee recordsHR files and payrollAdd to registerAR
Governance Suite / Setup plan
NILGIRI WELLNESSYour setup plan6 of 6 mapped
Front desk consentReception deskCollect consentFK
Membership softwareThe office laptopAdd a noticeRM
Paper sign-up formsFiling cabinet, since 2019Set retentionAR
Consultation notesHealth dataLimit accessFK
Shared driveFound by DiscoveryReview exportsVI
Employee recordsHR files and payrollAdd to registerAR
6 places mappedeach with an owner and a next step
See how Governance Suite would work for your business.
A walkthrough with a privacy expert, built around how your business handles personal data. Bring your messiest question.