Know where your website stands on DPDP
A free, read-only scan of your public site. Plain-language findings. No fine predictions, no jargon.
Scan your website
Read-only and free. Nothing on your site is changed.
- Does it apply to you?
- If your business handles personal data of people in India in digital form, such as names, emails, phone numbers or browsing data, the DPDP Act applies to how you handle it.
- What if you ignore it?
- The Act sets a maximum penalty for each type of breach, and the Data Protection Board decides each amount after an inquiry, looking at how serious the breach was and what the business did about it.
- How fast can you fix it?
- Start with the free scan. Your report lists the gaps that matter most with the fix for each, and our team can help you work through them.
How it works
Enter your website
We read your public pages the way a visitor's browser does. Nothing on your site is changed.
Verify your work email
We send a code to an email on your company's domain, so only your own team sees the full report.
Get your report
A score out of 100, the gaps that matter most and the fix for each, with a PDF you can share.
What the scan checks
13 checks on what any visitor's browser can see, each tied to a duty in the Act.
- Trackers wait for consent
- Consent banner with equal choices
- Privacy notice linked from the home page
- Privacy notice covers the required items
- Forms give notice and ask for consent
- Cookies wait for consent
- Grievance officer contact published
- A way for people to exercise their rights
- Parental consent wording where children's data appears
- Privacy notice dated or versioned
- Third-party sharing disclosed in the notice
- Every page served over HTTPS
- Security headers in place
Built for your sector
See what the DPDP Act means for businesses like yours.
Common questions
What is the DPDP Act?
The Digital Personal Data Protection Act, 2023 is India's law on how organisations collect, use and protect personal data in digital form. It gives people rights over their data and places duties on the businesses that handle it.
Does it apply to my business?
It applies to any organisation that processes digital personal data in India, and to organisations outside India that process it to offer goods or services to people in India. Being small does not exempt you, though some extra duties apply only to Significant Data Fiduciaries.
Is the scan really free?
Yes. There is no charge and no card. We ask for a work email so that a company's full results go only to its own people.
What does the scan look at?
Only what any visitor's browser can see on your public website: consent banner, trackers and cookies, privacy notice, forms, grievance contact, rights requests and basic security. It is read-only, respects robots.txt and never logs in or submits forms.
Does a high score mean we are compliant?
No. A high score means your website shows good foundations. Most DPDP duties sit inside the business, such as vendor contracts, staff access and breach response, which no website scan can see.
What happens after I get my report?
You can fix the gaps yourself using the steps in the report and scan again after seven days to measure progress, or request a call and our team will walk you through what fixing them involves.
Find out where your website stands
A free, read-only scan with plain-language findings you can act on.