The operational problem
Point tools divide one compliance programme across banners, documents, spreadsheets, inboxes, and disconnected audit trails.
About Privista
Compliance built from the law outward.
Privista is an India-first DPDP compliance platform designed to turn statutory obligations into working controls, reliable records, and evidence an organisation can actually prove.
7 toolsOne planned obligation stack
2 liveConsent and Scan available today
1 recordA shared evidence-led architecture
India-firstDesigned around India's DPDP regime
Why Privista exists
A banner cannot carry an obligation stack.
Data protection is not one checkbox or one policy document. It is notice, consent, purpose control, rights, records, risk assessment, incident handling, and the ability to demonstrate all of it. Privista exists to connect those duties instead of leaving organisations to stitch them together across unrelated tools.
The legal problem
International privacy products often begin with GDPR assumptions and retrofit Indian terminology and obligations afterwards.
The evidence problem
Passing an audit requires more than saying a control exists. An organisation needs records that show what happened and when.
How we build
Four principles behind every Privista tool.
The platform is being built as compliance infrastructure, not presentation software. These principles govern product scope, default behaviour, and how Privista describes what it can do.
Legal precision first
Product language and workflows begin with the statute and notified rules, then map to the real role of the organisation using them.
Enforcement over appearance
A control should change system behaviour. Consent, for example, must govern processing rather than merely display a banner.
Evidence by default
Actions should produce durable records at the moment they happen, not require a separate reconstruction when an audit begins.
Status stated honestly
Live, building, and planned mean different things. Privista labels them clearly instead of presenting a roadmap as a finished suite.
What exists today
The platform vision, with product status made explicit.
Privista is growing tool by tool. Consent and Scan are live; the remaining modules join the same obligation-led platform as they are built.
Consent
LivePurpose-led consent collection, enforcement, receipts, and ledger records.
Scan
LiveWebsite crawling, tracker discovery, DPDP checks, and evidence-backed reports.
Policy Studio
BuildingGuided drafting and maintenance for the documents a compliant site needs.
Rights, Records, DPIA, Breach
PlannedThe remaining operational modules in the full DPDP obligation stack.
Founder
Built at the intersection of law, security, and product.
Privista is founded by Amal Singh, a cyber-law and data-privacy professional pursuing a Master's in Cyber Law and Information Security at the National Law Institute University, Bhopal. His work spans data protection, cybersecurity, digital governance, and technology policy.
The product is shaped by that interdisciplinary view: legal interpretation should inform technical controls, and technical controls should create evidence a legal or compliance team can use.
The regulatory runway
Privista is being built for a regime moving into operation.
The DPDP framework is not a distant proposal. The Act is enacted, the final Rules are notified, and substantive obligations follow the Government's phased commencement schedule.
DPDP Act enacted
The Digital Personal Data Protection Act, 2023 received Presidential assent and became Act No. 22 of 2023.
Rules notified
The final DPDP Rules, 2025 and commencement notification established a phased implementation schedule.
Substantive duties commence
The main operational provisions commence eighteen months after the 13 November 2025 notification.
Official references: DPDP Act on India Code and Digital Personal Data Protection Rules, 2025.
Build a compliance programme that can show its work.
Start with a live Privista product or talk with us about the obligation your organisation needs to operationalise.