Platform
Policy and notice management
Two notice types ship today: the privacy notice and the cookie policy. Version them, map them to purposes, and keep the text the visitor actually saw. More notice types can be added.
Notices
Two types now
- 01Notice 1Live
Privacy notice
PurposeOnboarding KYCRightsAccess · Erasure - 02Notice 2Cleared
Cookie policy
CategoriesEssential · AnalyticsVendorsNamed - 03VersionSealed
Notice v3 shown
ID: nt-v3-91c15 Oct 2026, 21:04 ISTTwo notice types now. More can be added. - 04Can be addedIn review
Further notices
ChildrenAddableProcessors · AIAddable
What it does
Two types now
Privacy notice and cookie policy. Draft, review, and publish from one place.
More types can be added
Children’s notice, processor list, AI disclosure, and in-product notices use the same versioning when you add them.
Purpose mapping
Each published notice points at the purposes the fiduciary actually runs, not a generic paragraph.
Version history
What changed, when it went live, and which consent records still attach to the old text.
Where it appears
Website, preference centre, and the same wording the banner points to. More surfaces can be added.
Proof of what was shown
If a grievance asks which notice the person saw, the answer is a version, not a CMS guess.
Under the DPDP Act
- Notice. The Act requires the Data Principal to be informed of personal data, purposes, rights, and how to complain, before or at the time of collection.
- Consent depends on that notice. A grant against a notice that omitted a purpose is not informed. Cookie policy and privacy notice have to stay aligned with what the site loads.
Questions
Two: the privacy notice and the cookie policy. Children’s notices, processor notices, AI disclosures, and in-product notices can be added on the same version history.
The Act requires the person to be told purposes, rights, and how to reach the grievance officer, in language they can use. The version they saw has to be the version you can produce later.
A new version is stored. Prior consent is not stretched to a new purpose. Where the purpose set changed, the visitor is asked again.
Related guides
What is DPDP?
The Digital Personal Data Protection Act 2023, who it applies to, and penalties.
DPDP compliance
Obligation domains, a practical compliance path, and how Indian organisations operationalise the Act.
Cookie consent
Two banner layouts now. More can be added. Block until grant.
Consent management
Purpose grant, withdrawal, and a record you can produce later.
Infrastructure posture
Cloud and code, seen as a privacy duty. More estates can be added.
DPDP platform
Consent, scanning, DSAR automation, and AI governance in one compliance platform.
Data discovery
Inventory of systems and fields. Records stay in your network.
Data lineage
How data moved, and which stores are still unknown.