Documentation
A yearly retainer. We re-check your documentation set against whatever's changed in the Act, the Rules, or your own business that year, refresh whatever's gone stale, and stay reachable if a rights request or grievance needs a hand partway through the year.
A yearly retainer. We re-check your documentation set against whatever's changed in the Act, the Rules, or your own business, refresh whatever's gone stale, and stay reachable if a rights request or grievance needs a hand partway through the year.
A documentation set built once and never revisited drifts. New vendors show up, new products launch, new data gets collected, and the Rules themselves can still change; MeitY floated compressing the commencement runway in early 2026. A notice or a vendor agreement drafted against last year's facts stops being accurate the moment those facts move.
This is the retainer that keeps the set current and gives you somewhere to send a rights request or grievance without drafting the response from scratch each time.
Scope
The re-verification checks your notice, consent design, data inventory, retention schedule, vendor agreements, and breach plan against amendments to the Act and Rules and against changes in your own business, instead of assuming last year's draft still holds.
Whatever's drifted gets updated. A new vendor gets folded into your inventory and its own agreement. A new product line gets its data flows mapped and its notice updated to match.
When a rights request or grievance comes in, whoever you've named as your contact under Rule 9 gets support drafting the response, kept inside the ninety-day ceiling in Rule 14(3), instead of writing each one alone from a blank page.
Specifics
Every other DPDP service we offer produces a document that's accurate on the day it's delivered. It doesn't stay accurate on its own. Your vendor list changes, your product changes, and the law itself is still capable of changing; the commencement timeline was already the subject of a MeitY consultation in early 2026 that proposed shortening it. This retainer is the one engagement built to keep pace with all three, rather than freezing your compliance picture at whatever it looked like the day the pack was delivered.
| Trigger | What gets checked |
|---|---|
| A new vendor or processor | Vendor data-processing agreement, security safeguard clauses under Rule 6(1)(f) |
| A new product or data collection point | Notice, consent-screen copy, data inventory |
| A change to the Act, Rules, or a Schedule | Whichever artifacts the change actually touches |
| A rights request or grievance | Handled inside the Rule 14(3) ninety-day ceiling, with drafting support |
This is documentation support. If a grievance escalates into a matter before the Data Protection Board, that's outside what we do here, and you'd want separate representation for it. What this retainer covers is keeping the documentation accurate and helping draft the response while it's still at the grievance stage.
Process
Step 1 of 4
Send your current set
Whatever you have from last year's review, or your existing documents if this is the first cycle.
Common mistakes founders make
Clarifications
You still get the re-verification and a confirmation that the set holds. It's the only way to actually know nothing's changed, rather than assuming it.
It covers refreshing what's drifted. If growth means an entirely new documentation approach, for example because you've crossed into a new registered-user bracket under the Third Schedule, we'll tell you that scope has changed and quote it separately.
Scope depends on your volume, which we set at the start of the retainer based on what you're actually seeing. Tell us your rights-request and grievance volume at intake and we size it to that.
No. This retainer supports drafting and documentation. Representation before the Data Protection Board sits outside what we do, and you'd need separate counsel for that stage.
Related
Prefer to skip the paperwork?
BuildWright can take this off your plate — done properly, the first time.
Tell us about your partners and business and we'll take it from there.
Get a Quote
Skip the hassle — have us do it for you. We do it best.