Find out what you don’t know about your own legal position.

Not because anyone was careless. Because the questions that would have surfaced them (whose name is the trade mark actually in? does the freelancer who wrote our code own it? could we report a data breach within 72 hours?) are questions nobody thinks to ask until something has already gone wrong.

By then the options are narrower and the cost is higher.

These three health checks ask those questions. Each takes eight to fifteen minutes. What comes back isn’t an automated score. It’s a written report our team prepares from your answers, going through your position area by area, telling you what each finding means, what the law actually requires, and which items we’d deal with first if it were our business.

Some people read the report, fix a few things themselves, and we never hear from them again. That’s a perfectly good outcome, and it’s a large part of why we built these.

Questions like

• Is your privacy notice a standalone document, or is it buried inside your terms and conditions?
• Can a user withdraw consent as easily as they gave it?
• If a breach happened tonight, could you produce the report the Rules will require within 72 hours?
• Do you have written contracts with every vendor who processes personal data for you?

Your report covers: notice and consent · individual rights and grievance redressal · security and breach readiness · retention and erasure · vendors and processors · governance · children’s data · cross-border transfers.

Particularly useful if: you run a consumer app or website, hold data on children or students, use overseas cloud services, or have been asked about DPDP by a customer, an investor or your board. The substantive obligations take effect on 13 May 2027, and most organisations need nine to twelve months to prepare.

• A plain-language read on where you stand overall, in words, not a meaningless number out of 100.
• The items we’d deal with first, sorted by urgency: what to act on now, what to address this year, and what to strengthen when you can.
• Any live matters flagged separately: situations already in motion (a dispute, a notice, a suspected copy) that need attention regardless of how the rest scores.
• A section-by-section walkthrough: for each area, where you stand, what it means, and what good practice looks like.

Reports run to roughly three to four pages. What a report is not: it isn’t an audit, a certification or a compliance opinion. It is built from what you tell us, without any review of your documents, filings or systems.

The checks run on Google Forms. Your answers are used to prepare your report and kept for 12 months, as our Privacy Policy explains. Completing a check does not make you our client.