Privacy, GRC and responsible AI governance platform used by large organizations for consent, preference, third-party risk and AI oversight.
DPDP Act (India)
Quick answer
10 verified listings are tagged for DPDP in Agent Index dataset v0.1.27 (generated 2026-10-27).
India's DPDP Act 2023 and DPDP Rules 2025 (GSR 846(E)): Rule 4 (Consent Manager registration) is in force from 13 November 2026. Most remaining notice, security, breach and retention duties (Rules 3, 5–16, 22 and 23) apply from 13 May 2027. This page does not claim that the Data Protection Board has opened applications.
Framework tags indicate relevance for evaluation, not certification. This is not a ranking.
India's DPDP Act 2023 and DPDP Rules 2025 (GSR 846(E)): Rule 4 (Consent Manager registration) is in force from 13 November 2026. Most remaining notice, security, breach and retention duties (Rules 3, 5–16, 22 and 23) apply from 13 May 2027. This page does not claim that the Data Protection Board has opened applications.
Few global vendors publish India-DPDP-branded modules yet. Listings here are tools commonly evaluated for privacy inventory, consent, DSR and security — confirm DPDP fit with each vendor.
Key facts
Official sources
Last checked 2026-10-27. Every sentence links to an official source in the dataset.
- The Digital Personal Data Protection Act, 2023 (Act No. 22 of 2023) is implemented through the Digital Personal Data Protection Rules, 2025 (G.S.R. 846(E), Gazette of 13 November 2025). Source
- Rule 4 (Consent Manager registration and obligations) comes into force one year after publication of G.S.R. 846(E) (13 November 2025), i.e. 13 November 2026. This page does not claim that the Data Protection Board has opened applications. Source
- Rules 3, 5–16, 22 and 23 come into force 18 months after publication, i.e. from 13 May 2027. Source
- On 5 October 2026 MeitY issued the Digital Personal Data Protection (Removal of Difficulties) Order, 2026 (S.O. 5458(E), Gazette of 6 October 2026, in force on publication). It amends Section 9(1) to read 'child or of a person with disability' and replaces 'audit' with 'data audit' in Section 10(2)(c)(ii) for Significant Data Fiduciaries. Source
From this dataset
- 10 verified listings on this page, with headquarters in 3 HQ regions and 3 countries.
- Dataset version 0.1.27, generated 2026-10-27.
- India's DPDP Act 2023 and DPDP Rules 2025 (GSR 846(E)): Rule 4 (Consent Manager registration) is in force from 13 November 2026. Most remaining notice, security, breach and retention duties (Rules 3, 5–16, 22 and 23) apply from 13 May 2027. This page does not claim that the Data Protection Board has opened applications.
Cite as: Agent Index by Heritage Services, DPDP Act (India), dataset v0.1.27 (https://theagentindex.io/frameworks/dpdp/)
FAQ (from this dataset)
What is listed on this framework hub?
India's DPDP Act 2023 and DPDP Rules 2025 (GSR 846(E)): Rule 4 (Consent Manager registration) is in force from 13 November 2026. Most remaining notice, security, breach and retention duties (Rules 3, 5–16, 22 and 23) apply from 13 May 2027. This page does not claim that the Data Protection Board has opened applications. 10 verified listings from Agent Index dataset v0.1.27.
How many listings are on this page?
10 verified listings in dataset v0.1.27 (2026-10-27).
Which listings are headquartered in India, Asia-Pacific or Australia/NZ?
7 of 10 listings on this page publish an HQ in India, Asia-Pacific or Australia/New Zealand: Crest TPRM AI agents (Vendor Outreach, Questionnaire Intelligence, Continuous Monitoring, Risk-Based Scoring, Finance, Screening and Efficiency agents) (India), Data Adhikaar DPDPA agents (ten-agent compliance fabric) (India), IDfy AI Agents (India), IndiSec DPDPA compliance agents (Veda AI privacy analyst) (India), OnFinance AI Maxwell (open-source cybersecurity and compliance agent for Indian BFSI) (India), Signzy Agentic CKYC (India), VibrantiX agentic compliance platform (Evidence Review, Vendor Risk Scoring, Risk Detection, Customer Trust, Policy Drafting and Control Remediation agents) (Singapore).
Is this a ranking?
No. This is not a ranking or score. Order is mechanical (from dataset fields such as name, framework-tag count or table membership), not a paid placement or quality judgement.
Official sources: meity.gov.in/static/uploads/2024/02/Digital-Personal-Data-Protection-Act-2023.pdf · meity.gov.in/documents/act-and-policies/digital-personal-data-protection-rules-2025-gDOxUjMtQWa · meity.gov.in/static/uploads/2025/11/53450e6e5dc0bfa85ebd78686cadad39.pdf · meity.gov.in/static/uploads/2026/10/daf495a7b5798a3dfa72a944b51fc176.pdf
Related: DPDP checklist for teams using AI agents · CERT-In CIAD-2026-0049 guide (personal-data angle of the 15 Oct 2026 advisory) · India HQ region.
Use-case comparisons with 2+ listings tagged DPDP: KYC and identity AI agents · India, Asia-Pacific and ANZ AML and KYC AI agents · TPRM and vendor-risk AI agents · Privacy operations AI agents · AI governance agents and platforms
Agents tagged for DPDP
10 listings. Tags indicate relevance for evaluation — not a certification that the vendor “implements” the law.
Data security, privacy and DSPM platform whose AgentIQ agentic layer runs data-risk work from a request: four BigID agents at launch (Remediate Sensitive Data, AI Governance Enforcement, Access Exposure Analysis, Privacy Operations) investigate, prioritise and act, e.g. revoking access, remediating exposure, applying retention, quarantining data and fulfilling data subject requests.
Data privacy infrastructure for DSRs, consent and data governance, plus Transcend Rails policy-as-code controls for what AI agents may do.
Agentic KYC operations layer that validates, auto-cures and submits CKYCRR 2.0 records to CERSAI, plus broader AI-powered KYC, KYB and AML screening.
Governed AI agents for KYC/KYB onboarding, credit underwriting, due diligence and DPDP-oriented privacy compliance in regulated finance.
IndiSec DPDPA compliance agents (Veda AI privacy analyst)
IndiSec (Indisec Edge Private Limited)
India
India DPDP Act compliance platform where assessment, obligation, consent, notification and evidence agents (plus the Veda AI privacy analyst) run gap assessments, track obligations, draft notices and assemble evidence, with lawyers and the customer approving every gate.
Data Adhikaar DPDPA agents (ten-agent compliance fabric)
Data Adhikaar (Qodequay Technologies Pvt. Ltd.)
India
India DPDP Act compliance platform run by ten scoped agents for data discovery and RoPA, consent, data principal rights requests, breach response, DPIAs, regulatory intelligence, policy drafting, processor risk and audit evidence, with human approval gates for Board notifications, policy publication and severity downgrades.
Singapore-headquartered agentic compliance platform whose named agents review uploaded evidence against framework controls and flag gaps, score vendors from 12+ external sources without questionnaires, scan cloud posture and auto-escalate critical findings to the risk register, draft answers to customer security questionnaires (SIG, CAIQ, custom) from live policies, draft policies, and generate fixes for failed controls and mark them ready for re-audit.
Crest TPRM AI agents (Vendor Outreach, Questionnaire Intelligence, Continuous Monitoring, Risk-Based Scoring, Finance, Screening and Efficiency agents)
Crest (Crest Veda TechWorks Private Limited)
India
New Delhi-headquartered third-party risk platform with seven agents marked Live: an outreach agent that autonomously sends and follows up vendor emails and voice reminders and escalates non-response, a questionnaire agent that distributes, chases and analyses vendor questionnaires, plus continuous adverse-media/watchlist monitoring, risk-based scoring, financial analysis, screening and efficiency agents that auto-approve low-risk vendors and trigger re-assessments.
OnFinance AI Maxwell (open-source cybersecurity and compliance agent for Indian BFSI)
OnFinance AI (Mindweave Transformers Private Limited, Bengaluru)
India
Free, self-hosted, open-source (AGPL-3.0) agent from India's OnFinance AI for banks, brokers, NBFCs, AMCs, insurers and fintechs. It runs 26 workflows of specialist agents that keep a company's regulatory profile current, probe repositories, infrastructure and vendors for gaps against SEBI, RBI, IRDAI, CERT-In and DPDP controls, and write findings (each citing a specific clause), remediation plans and audit reports into a validated, append-only ledger for human review.
Saved
Reference:
We'll email you when a matching listing is added; no other automatic emails. Nothing is sent automatically now.
Related alternatives (relevance grouping, not a ranking): Sprinto alternatives · Scrut alternatives
Best DPDP AI agents (mechanical listing order, not a ranking) · All frameworks