Disclaimer and Notice of Limits

Version 1.0 · Effective 30 September 2026 · Part of the Terms of Service

1. Plain statement of what this is

VERIDIAN DPDP is a DPDP implementation and compliance-management software. It helps an organisation organise and record the work of meeting India's data-protection law: it lists the jobs the law implies, assigns each to a named person, reminds people by email, collects their dated answers and keeps an unalterable history of them.

It is not a cyber or system product. It is not a security tool, a firewall, a scanner, an anti-malware or data-loss-prevention product, a monitoring or breach-detection system, an encryption or key-management service, a back-up service, or a tool that finds, cleans, masks, anonymises, corrects or deletes personal data in your or anyone's systems. It does not connect to your systems, servers, cloud accounts, email, drives or databases for that purpose. Anything the Service calls a "job" — including jobs that say erase, delete, secure, encrypt, back up or report — is an instruction and a place to record that your people did it. The Service does not do it, check that it was done properly, or make it true.

2. No professional advice; no certification; no guarantee

1. The Company is a software provider. It is not a law firm, advocate, chartered accountant, company secretary, auditor, consultant or regulator, holds none of those registrations for this purpose, and does not practise any of those professions through the Service. Nothing in the Service, our emails, our pages or what our people say is legal, tax, accounting, audit or other professional advice. Get your own adviser.
2. No certificate exists. No DPDP certification exists in India and we do not offer one. A completed checklist, a green status, a percentage, a score, a record or a report from the Service is an internal management aid only. It is not an audit, an opinion, evidence that you comply, or a defence before the Data Protection Board, a court or any authority.
3. No guarantee. We do not promise that using the Service will make you compliant, avoid any complaint, inquiry, order or penalty, or prevent any loss. The Data Fiduciary stays responsible under the law whatever tool or contract it uses.

3. Accuracy of the content

1. The job library and playbooks are general working aids written by the Company, with the help of AI, from public legal texts. They have not yet been reviewed or approved by a practising lawyer, and some legal references are still marked for verification. The law and the Rules are new, are being brought into force in stages (the main duties of the DPDP Act and Rules from 13 May 2027), and may be amended or read differently by the Board and the courts. The SPDI Rules, 2011 apply until then.
2. Output of the Service (lists, drafts, emails, summaries, AI output) depends on what you and others enter. Check all of it against the law and your facts before relying on it, sending it to anyone or filing it anywhere. Your failure to check is your own.
3. Examples, sample data and screens shown in demonstrations and marketing are illustrative.

4. Your responsibility

You alone are responsible for: your compliance with every law; deciding what data you hold, why and for how long; the notices, consents, rights, grievance, breach and deletion duties the law gives you; securing your systems and your vendors; the truth and completeness of what you record; choosing your people and what they may do; children's data and parental consent; and every decision you take using the Service. If you are a CA, CS, audit, legal or other adviser using the Service for clients, your duties to your clients and your professional body remain yours.

5. Artificial intelligence

AI output can be wrong, invented, out of date, incomplete or different each time. An AI assistant connected through an AI work link acts for you and on your choice of provider. The Company does not control it, is not responsible for its output or conduct, and does not train any model on your Customer Data. A human must check AI output before it is relied on.

6. Third parties and availability

The Service depends on third parties (hosting, database, network, email, mailbox and AI providers) and the public internet. We are not responsible for their availability, security, terms or conduct, or for email that is delayed, filtered or lost. A reminder that did not arrive does not extend any deadline. We give no uptime or response-time promise unless a signed agreement does.

7. Not for safety-critical use; no offer

The Service must not be used where failure could cause death, injury or serious physical harm. Nothing on our pages is an offer to sell securities, an investment solicitation, or a commitment about future features, prices or dates.

8. Limitation of liability

TO THE FULLEST EXTENT THE LAW PERMITS, THE COMPANY IS NOT LIABLE FOR ANY PENALTY, FINE, COMPENSATION OR ORDER IMPOSED ON YOU OR ANYONE; FOR INDIRECT, SPECIAL OR CONSEQUENTIAL LOSS; FOR LOSS OF PROFIT, BUSINESS, DATA IN YOUR SYSTEMS, GOODWILL OR REPUTATION; FOR THE COST OF RESPONDING TO ANY BREACH OR INQUIRY; OR FOR ANYTHING FLOWING FROM YOUR RELIANCE ON THE SERVICE OR ITS OUTPUT. THE COMPANY'S TOTAL LIABILITY IS CAPPED AS STATED IN CLAUSE 11 OF THE TERMS OF SERVICE.

Nothing excludes liability for fraud or wilful misconduct, or any liability that cannot lawfully be excluded. Clause 11 of the Terms is repeated here by reference and applies to this Disclaimer as if set out in full.

9. Protection of the Company and its people

The Service is provided only by SHOBHA KAMAL SOLUTIONS PRIVATE LIMITED. Its directors, officers, employees, shareholders, associates, affiliates, group companies, contractors, consultants, agents, licensors, suppliers and sub-processors, and their successors and assigns (the "Protected Persons"), have no duty and no liability to you in connection with the Service, and you agree not to bring any claim against any of them personally. The Company holds this protection for itself and as agent and trustee for each Protected Person, and each may rely on this clause and on clause 11.4 of the Terms. You will indemnify them as set out in clause 12 of the Terms. This does not remove a liability that a statute places directly on an individual and that cannot be contracted out of.

10. Publicly available materials and third-party marks

The job library is built from public legal texts and general knowledge. Facts, ideas and legal texts are not owned by anyone; our wording is ours. Third-party and open-source components stay the property of their owners under their own licences, with no warranty from us. Names and marks of others are used only to identify them, with no affiliation implied. If you believe something in the Service infringes your rights, write to us at the address below with enough detail to find it and the basis of your claim; we will review it in good faith, without admission of liability.

11. Governing law and disputes; changes; contact

Indian law governs. Disputes go to negotiation and then arbitration seated at Ghaziabad, with a sole arbitrator appointed by agreement or, failing it, by the court, exactly as in clause 14 of the Terms. The courts at Ghaziabad have exclusive jurisdiction in support. If any part of this notice is unenforceable, it is cut back to the minimum needed and the rest stands. We may change this notice as clause 15.1 of the Terms provides. Written notices: to the registered office above with a copy to dpdp@veridian-aios.com.