Quick answer
10 verified listings are on this best-of page for DPDP in dataset v0.1.27 (generated 2026-10-27).
Order is mechanical (compliance-category first, then by number of framework tags), not a paid ranking or quality judgement.
Tags mean relevance for DPDP, not certification.
India's DPDP Act 2023 and DPDP Rules 2025 (GSR 846(E)): Rule 4 (Consent Manager registration) is in force from 13 November 2026. Most remaining notice, security, breach and retention duties (Rules 3, 5–16, 22 and 23) apply from 13 May 2027. This page does not claim that the Data Protection Board has opened applications.
Official hub with sources and tag rules: DPDP framework hub. Few global vendors publish India-DPDP-branded modules yet. Listings here are tools commonly evaluated for privacy inventory, consent, DSR and security — confirm DPDP fit with each vendor.
Last checked 2026-10-27.
Listed: agents tagged DPDP in our dataset, compliance-category first, then by number of framework tags. Tags mean relevance, not certification; check each vendor's claims. Order is mechanical, not a paid ranking.
Singapore-headquartered agentic compliance platform whose named agents review uploaded evidence against framework controls and flag gaps, score vendors from 12+ external sources without questionnaires, scan cloud posture and auto-escalate critical findings to the risk register, draft answers to customer security questionnaires (SIG, CAIQ, custom) from live policies, draft policies, and generate fixes for failed controls and mark them ready for re-audit.
OnFinance AI (Mindweave Transformers Private Limited, Bengaluru)
India
Free, self-hosted, open-source (AGPL-3.0) agent from India's OnFinance AI for banks, brokers, NBFCs, AMCs, insurers and fintechs. It runs 26 workflows of specialist agents that keep a company's regulatory profile current, probe repositories, infrastructure and vendors for gaps against SEBI, RBI, IRDAI, CERT-In and DPDP controls, and write findings (each citing a specific clause), remediation plans and audit reports into a validated, append-only ledger for human review.
Data privacy infrastructure for DSRs, consent and data governance, plus Transcend Rails policy-as-code controls for what AI agents may do.
Data security, privacy and DSPM platform whose AgentIQ agentic layer runs data-risk work from a request: four BigID agents at launch (Remediate Sensitive Data, AI Governance Enforcement, Access Exposure Analysis, Privacy Operations) investigate, prioritise and act, e.g. revoking access, remediating exposure, applying retention, quarantining data and fulfilling data subject requests.
Privacy, GRC and responsible AI governance platform used by large organizations for consent, preference, third-party risk and AI oversight.
Crest (Crest Veda TechWorks Private Limited)
India
New Delhi-headquartered third-party risk platform with seven agents marked Live: an outreach agent that autonomously sends and follows up vendor emails and voice reminders and escalates non-response, a questionnaire agent that distributes, chases and analyses vendor questionnaires, plus continuous adverse-media/watchlist monitoring, risk-based scoring, financial analysis, screening and efficiency agents that auto-approve low-risk vendors and trigger re-assessments.
Data Adhikaar (Qodequay Technologies Pvt. Ltd.)
India
India DPDP Act compliance platform run by ten scoped agents for data discovery and RoPA, consent, data principal rights requests, breach response, DPIAs, regulatory intelligence, policy drafting, processor risk and audit evidence, with human approval gates for Board notifications, policy publication and severity downgrades.
Governed AI agents for KYC/KYB onboarding, credit underwriting, due diligence and DPDP-oriented privacy compliance in regulated finance.
IndiSec (Indisec Edge Private Limited)
India
India DPDP Act compliance platform where assessment, obligation, consent, notification and evidence agents (plus the Veda AI privacy analyst) run gap assessments, track obligations, draft notices and assemble evidence, with lawyers and the customer approving every gate.
Agentic KYC operations layer that validates, auto-cures and submits CKYCRR 2.0 records to CERSAI, plus broader AI-powered KYC, KYB and AML screening.