Solutions · DPDP Compliance
DPDP obligations apply from May 2027. Know where you stand now.
A self-assessment, a remediation plan and an evidence trail — run in Fortress, supported by our privacy team.
Nov 2025
DPDP Rules notified
Nov 2026
Consent Manager provisions
May 2027
Most obligations apply
Updated November 2026
The problem
Personal data now carries consent duties, breach reporting deadlines and penalties.
Most organisations cannot say what data they hold, where it sits, or who can reach it.
How Risknox solves it
Platform and people, doing different halves of the job.
Platform
Fortress runs a DPDP self-assessment, scores each obligation, assigns remediation to named owners and keeps the evidence attached to every control.
Expert service
Our privacy consultants help with policy drafting, data mapping, consent notices and a readiness review before you self-declare.
What you get
- DPDP self-assessment across consent, rights, retention, security and breach response
- Gap report with severity and a named owner per gap
- Remediation plan tracked to closure in Fortress
- Data mapping workshop and policy templates
- Evidence pack for the board and the regulator
How it works
- 1
Self-assess
Answer the DPDP assessment in Fortress. Roughly half a day for a mid-sized business.
- 2
Review gaps
Walk the gap report with our team and agree what is fixable this quarter.
- 3
Remediate
Owners close gaps with evidence attached to each obligation.
- 4
Hold and repeat
Evidence stays current; re-assess quarterly or when processing changes.
Products in this solution
Questions we get asked
Is a DPDP self-assessment legally sufficient?+
No. DPDP has no certification scheme. A structured self-assessment shows you took the obligation seriously and gives you evidence — it is not a government approval.
Do you act as our Data Protection Officer?+
We can support a DPO function through a vCISO engagement. Accountability stays with your organisation.
How long does readiness take?+
The assessment takes a day. Remediation usually runs a quarter, and data mapping is the part that sets the pace.
Does this include consent management tooling?+
The assessment covers consent obligations and we help write the notices and withdrawal process. A consent manager product is not part of this offering.
Start your free DPDP self-assessment
No obligation. If it is not the right fit, we will say so.