Student data, witha parent's yes on record.
Schools, colleges and coaching centres hold more personal data than most businesses: admissions, report cards, medical notes, photos and the school app. For students under 18, DPDP expects verifiable consent from a parent. ComplyZero collects it, keeps it on record, and handles requests, vendors and breaches in one place.
Built by data protection lawyers and cybersecurity experts.
Where DPDP meets a school's day.
- A parent fills in the admission formOn paper at the office, or online.Consent HubParent consent collected with the admission, by personal link, QR code or a form your office fills in, with the notice the parent saw on record.
- Class photos, events and the school appEvery use of a child's details and image.PurposesEach use kept as its own purpose, so you only do what a parent agreed to, and can show it.
- A parent asks what you hold on their childOr asks you to correct or delete it.RequestsEvery request on one queue, with the clock running, the identity check and a record of the reply.
- Report cards, medical forms and ID copies in drivesSpreadsheets, scans and old exports.Discovery finds ID numbers and contact details in the tools you connect. Deep Scan reads scanned forms and ID copies too.
- Transport, ed-tech apps and fee platformsEveryone who handles student data for you.Vendor RegisterEvery vendor that touches student data, under which agreement, and when it was last reviewed.
- A staff laptop with student records goes missingThe question is who to tell, and by when.Breach DeskThe facts, who must be told and by when, and the next step ready to send, in one place.
Everything DPDP asks. Handled in one place.
Answer every data request on time. Live counts at a glance. Late ones turn red. Every kind of request.
Only need a consent banner for your website? See the website banner. It comes with every plan.
DPDP is a team's worth of work. You don't need the team.
Doing it by hand takes a privacy lead, a lawyer, a developer, someone to find where customer data lives and someone to keep the records. ComplyZero does their work, in one place.
By hand
- Privacy leadWorks out what applies and what comes next.
- LawyerDrafts your notices and consent wording.
- DeveloperBuilds the banner, forms and request inbox.
- Data analystTracks down customer details across your systems.
- Records keeperFiles proof of every decision.
- Readiness ScoreWhat applies and what to do next, the next step first.
- Notices and consentBuilt on the Act and the Rules, ready for you to approve.
- Banner, forms and requestsReady to switch on. No developer needed.
- Discovery finds them in the tools you connect.
- Evidence VaultEvery step recorded and sealed, ready when anyone asks.
Five jobs. One platform.
Questions schools ask.
Does DPDP treat children's data differently?
Yes. For anyone under 18, the Act expects verifiable consent from a parent or lawful guardian, and it rules out tracking, behavioural monitoring and targeted advertising aimed at children. The Rules exempt some of what educational institutions do, such as tracking for safety and educational activities, so not everything needs fresh consent.
How do parents give consent?
By a personal link sent from your admission list, a QR form at the school office, or a paper form your staff enter. Each consent is recorded against the child, with the notice the parent saw.
Does DPDP apply to a coaching centre or a playschool?
Yes. The Act has no minimum size. If you hold students' or parents' details in digital form, including forms typed up from paper, it applies to you.
What about the ed-tech apps and transport vendors we use?
The Vendor Register keeps every vendor that touches student data, under which agreement, and when it was last reviewed.
Who at the school would run it?
Usually the admin office, with IT for the website banner. We set it up with you, and short guides cover each step.
See it built around your school.
A 25-minute walkthrough: your admissions, your parent consent and your records, then a written list of the gaps we discussed.
- 25 minutes
- On Google Meet
- Free, no obligation
- Your business and your questions. We start with how you collect and use personal data, and what you want in place first.
- The parts of the product that matter to you. A walkthrough on the real product, with the records and results it produces.
- A clear next step. How setup would work for your team, which plan fits and what it costs.
Rather look around first? See the product tour
Book your demo.
A few details, then a time that works for you.