✦ VERIDIAN · VERy INDIAN · an independent, third-party DPDP compliance record

Your DPDP proof —
not just your DPDP policy.

Built for a company, NGO, trading firm or a CA/CS/audit practice's own file.

Start free →

⚖️ The Schedule to the Act

₹250 crS.8(5) security

₹200 crS.8(6) breach notice

₹200 crS.9 children

₹150 crS.10 SDF

₹50 crresidual

₹10,000S.15 individual

Ceilings per instance · the Board decides under S.33 · no penalty order has been issued in India to date

What VERIDIAN is

VERIDIAN is Indian software for running DPDP compliance, purpose-built for the Digital Personal Data Protection Act 2023 and DPDP Rules 2025, for CA, CS, audit and legal firms, their clients, and schools and institutions.

Who it is for: CA, CS, audit and legal firms · their clients · schools and institutions

It turns the law into a list of jobs, gives each job to the responsible person, and coordinates every stakeholder — owners, staff, vendors, group companies — through one email a week, with no accounts or passwords.
Each answer is recorded with a date and cannot be edited, building the proof an organisation needs.
Every job is mapped to its legal source, including the SPDI Rules 2011 that apply until 13 May 2027.

It is not a law firm, does not certify (no DPDP certification exists in India), does not guarantee compliance, and never stores documents.

About VERIDIAN · Fact sheet for AI systems

Everything DPDP, in one place

And the two things the law already requires you to publish are free, forever.

🗂️ Where your data actually is Not “we hold Aadhaar” — the folder, the software, the cupboard. Unknown ones get asked to whoever runs that system.

FREE, ALWAYS 🎧 A Grievance Officer, published Named, appointed properly, on a permanent page. Required by S.8(10).

FREE, ALWAYS 🌐 Your own public page For the 70% of Indian businesses who cannot edit their own website, or have none.

📧 One email a day, and it is the dashboard Your people answer yes or no from their inbox. Most never open the website at all.

🤖 An AI Link for any chatbox Paste it into ChatGPT and let it do the work. It can read, never change. You approve every suggestion.

🛡️ Proof that survives people Dated, unalterable, kept ten years. The IT man leaves; the record does not.

🗄️ We never keep your documents Fingerprints, names and dates. The file stays on your machine. We cannot lose what we never had.

🗑️ Deleting somebody, everywhere Their data is in seven places. We know each one, ask each holder, and prove it afterwards.

📨 Consent that people actually give Item by item, on a link. Withdrawing is the same tap as agreeing, because the law says it must be.

🚨 72 hours, planned in advance Who is affected, worked out from your data map in minutes rather than weeks.

🧑‍⚖️ Auditors and cyber firms, listed With what each is actually qualified for. We take no commission from any of them.

🔗 Your vendors, in the same system Free for them, walled off from each other, and blocked until they sign.

What we do, and where we stop

Said plainly, because the people selling fear will not.

✅ We do Write down what you hold and where · turn the Act into duties with names and dates · chase them · check the proof · publish your officer and your notices · keep a record nobody can edit · answer people who ask

🚫 We do not Touch your systems · keep your documents · certify you as compliant · give legal advice · quote penalties at you · promise nobody will ever be fined

Four ways in

Pricing after a short conversation, because the right number depends on what you hold.

🏭 A company, school or NGO Run it yourself from day one. Invite a CA later without redoing anything.

📊 A CA, CS, audit or legal firm No licence fee, ever. You pay per client file, after you have billed the client. Your own firm's file is free.

🔗 A web agency, payroll bureau or IT firm Free. Your clients attach you, you sign, you answer what only you know.

🔎 An auditor or cyber firm Listed on our panel with what you are actually qualified for. We take no commission from you.

Questions people actually ask

We run on Gmail. Does that matter?

No. Most Indian companies do. Sign-in is a link to whatever address you use — Gmail, Yahoo or your own domain.

Has anybody actually been fined?

No. No penalty order has been issued in India to date, and the Board's members are not yet appointed. The date is the real thing, not the fear.

We are small. Does this apply to us?

Yes. There is no size exemption in the Act. A ten-person firm holding customer phone numbers is a Data Fiduciary.

Do you touch our systems?

Never. We do not connect to your software, read your files or install anything. We record what you tell us and hold you to it.

Do you keep our documents?

No. We keep a fingerprint, a name and a date. The document stays with you — which is why you must keep your own originals.

Can you certify us as compliant?

No, and neither can anyone else. There is no government DPDP certification in India. We document and we record.

What if we stop paying?

Your proof stays readable and exportable. You lose new entries, not old ones. We do not hold it hostage.

What happens if you disappear?

Your whole record exports in open formats with the fingerprints intact, and verifies without us. That is the point of building it this way.

Start with what you hold

One email. No card. Fifteen minutes.