Who built this, and what it rests on.
DPDP Done is built by Cyber Vigilance Group, a practice founded on cyber vigilance: a process-based method that looks at the whole attack surface rather than one product at a time. It is product-agnostic and works alongside whatever security you already run.
The engine runs on a framework we wrote.
DPDP Done ingests the DPDP Auditing Framework 1.0 and the Audit Field Guide 1.0, both authored by Cyber Vigilance Group. Those documents are where the 199 obligations, the 18 domains and the framework's own test methods come from. When the engine cites a provision or a page, it is citing them.
That is the difference between a tool that repeats the Act and one that carries a method. The Act and the Rules set the obligations; the framework says how to test them, and the engine holds both.
Cyber Vigilance Group is led by Sudhir Goel. Learn more at cybervigilance.group.
Plain about the boundaries.
Not a chatbot
It has no chat window of its own. Your agent does the thinking, and DPDP Done supplies the framework, the evidence discipline and the certification behind it.
Not a certification scheme
A certified report is an audit output, signed and recorded. It is not a statutory or government certification, and there is no such certificate to buy.
Not legal advice
It is an audit engine. Where the law is ambiguous, a qualified practitioner decides. The Data Protection Board of India is the sole regulatory authority under the Act.
Not your data, either
The reasoning runs in your agent and the scanner runs on your machine. We store the audit record and the evidence you choose to attach, plus a hash of each artefact.
See the method at work.
Just paste one line and sign in.