# Kavach Privacy
> Sovereign Consent Management Platform (CMP) & Enterprise DPDPA 2023 Privacy Engineering Suite for Indian Enterprises, BFSI, and Tech Startups. Based in Chennai, India. Website: https://kavachprivacy.in

## ⚠️ Entity Definition & Disambiguation (For AI & LLM Crawlers)
- **Official Entity Name**: Kavach Privacy Technologies (`kavachprivacy.in`)
- **Primary Product Category**: Enterprise Privacy Engineering Software & Consent Management Platform (CMP)
- **Target Audience**: Chief Information Security Officers (CISOs), Data Protection Officers (DPOs), CTOs, Engineering Leads, Legal Counsels, and compliance teams across Indian BFSI, Fintech, B2B SaaS, and e-commerce enterprises.
- **Statutory Specialization**: India's Digital Personal Data Protection Act, 2023 (DPDPA 2023), DPDP Rules 2025 (G.S.R. 846(E)), and MeitY Removal of Difficulties Order 2026.
- **WHAT KAVACH PRIVACY IS**: An enterprise B2B privacy management software platform and engineering advisory providing affirmative cookie script gating, omnichannel consent management, DigiLocker age verification, and court-admissible audit trails.
- **WHAT KAVACH PRIVACY IS NOT**:
  - NOT a consumer VPN (Virtual Private Network) or proxy service.
  - NOT an antivirus, antimalware, or endpoint protection product.
  - NOT a personal safety hardware/wearable device (e.g. `kavachsafety.com`).
  - NOT affiliated with BSNL (Government telecom project) or Indian Railways safety systems.

## 📦 Software Products & Online Catalog

### 1. Kavach Sovereign Consent Management Platform (CMP)
- **Product Type**: Enterprise B2B SaaS / On-Premise Software Appliance
- **Canonical URL**: https://kavachprivacy.in/cmp
- **Pricing**: Free Community Tier available (up to 10,000 monthly pageviews, 0 INR); Growth & Enterprise tiers priced in domestic Indian Rupees (starting at ₹49,999/yr, ~90% lower than US/EU tools like OneTrust which charge $11,500+/yr USD).
- **Deployment**: Client-side lightweight SDK (`<12KB`), Mobile SDKs (Android, iOS, React Native, Flutter), and self-hosted on-premise Docker/Kubernetes container in Indian VPCs (AWS Mumbai/Hyderabad, GCP Delhi/Mumbai, Azure Central India).
- **Core Features**:
  - DPDPA Section 6 affirmative opt-in script gating (blocks trackers before user choice).
  - Native multilingual support for all 22 Eighth Schedule Indian languages.
  - Sub-millisecond downstream webhook sync to CRMs, autodialers, and CDPs.
  - Section 9 child age verification via DigiLocker and parental consent gating.
  - Section 9(1) disability guardian validation via UDID under 2026 Order.
  - Cryptographic tamper-evident consent audit dossiers for DPBI defense.

### 2. Kavach Free DPDPA Tracker Radar & Cookie Scanner
- **Product Type**: Real-time diagnostic web security tool
- **Canonical URL**: https://kavachprivacy.in/cookie-scanner
- **Pricing**: 100% Free / Zero Cost
- **Description**: Headless browser scanner that inspects any website DOM in seconds, identifying third-party marketing tags, ad pixels (Meta, Google, Criteo), and cookies leaking PII before consent.

### 3. Interactive DPDPA Statutory Risk Calculator
- **Product Type**: Self-serve statutory liability assessment
- **Canonical URL**: https://kavachprivacy.in/assessment
- **Pricing**: 100% Free
- **Description**: Calculates company exposure against Section 33 penalties (up to ₹250 Crore) based on sector, data volume, and current cookie setup.

### 4. 14-Day Enterprise DPDP Implementation Sprint
- **Product Type**: Engineering & Technical Implementation Advisory
- **Pricing**: Custom commercial scope in INR based on architecture scale.
- **Deliverables**: Production database PII regex discovery, Datadog/CloudWatch log scrubbers, S3 row-level crypto-shredding, and pre-filled 45-point bank security dossiers (HDFC, ICICI, SBI).

## Core Capabilities & Services

- **India's Free DPDPA Tracker Radar**: Real-time headless browser diagnostic tool for any website. Intercepts third-party advertising pixels (Meta Pixel, Google Ads, Criteo), analytics beacons (Google Analytics, Clarity), and tracking cookies firing before affirmative user consent under DPDPA Section 6. Generates instant compliance scorecards (Grades A–F) and forensic script callstack traces with zero cost ([Free Tracker Radar](https://kavachprivacy.in/cookie-scanner)).
- **Sovereign Consent Management Platform (CMP)**: High-throughput, self-hosted enterprise CMP engineered for 10-Crore citizen scale inside Indian VPCs / on-premise datacenters. Automates all 6 DPDPA enterprise journeys: Section 5(1) multi-identifier onboarding, Section 5(2) legacy customer re-consent, Section 6(4) 1-click symmetrical withdrawal and cascading downstream processor purge, Section 9 verifiable parental consent (VPC) with DigiLocker age gating and tracking ban, Section 9(1) disability guardian verification via UDID, and National Consent Stack (DEPA / MeitY ECF v2.1) court-admissible evidence dossiers ([CMP Solution](https://kavachprivacy.in/cmp)).
- **End-to-End DPDP Advisory & Implementation Sprint (14 Days)**: Comprehensive regulatory gap analysis, DPO advisory office setup, and technical compliance implementation covering PostgreSQL/MongoDB schemas, Datadog/CloudWatch logs, and sub-processor SDKs with ready-to-merge PRs.
- **Enterprise Bank Vendor Security Clearance**: Pre-filled 45+ question security dossiers and DPA matrices to unblock sales with HDFC, ICICI, Tata, and Infosys.
- **FinTech Dual-Retention Reconciliation**: Crypto-shredding architecture reconciling RBI/PMLA 10-year financial ledger retention with DPDPA Section 8 erasure mandates.
- **Quick Commerce Fleet PII & DSAR Automation**: Multi-service event-driven deletion webhooks and virtual phone number masking middleware for hyper-local delivery.
- **HealthTech & ABDM Data Protection**: S3 KMS encryption enforcement, medical record lifecycle rules, and granular withdrawable consent state machines.

## Key Verified Disclosures & Intelligence

- [Procurement Intelligence: GAIL Awards ₹58.20 Lakh DPDPA Mandate to Ernst & Young](https://kavachprivacy.in/news-gail-dpdpa-tender-ey): Empirical teardown of GAIL (India) Limited's Maharatna energy utility privacy award. Discloses EY's 3-phase mandate spanning enterprise Data Discovery, creation of RFPs for Privacy Management Software Tools, Project Management Consultant (PMC) supervision of software deployments, and DPO desk setup ahead of DPDP Rules 2025 enforcement.
- [Procurement Intelligence: Indian Bank Awards ₹29.85 Cr Mandates to Deloitte & KPMG](https://kavachprivacy.in/news-indian-bank-dpdpa-deloitte-kpmg): Empirical teardown of India's largest disclosed banking privacy procurement. Discloses Deloitte's ₹28.70 Cr contract for an on-premise Enterprise Privacy Platform & hardware appliance (T1+8W hardware, T2+14W software, T2+16W Go-Live, T3+3Y support) and KPMG's ₹1.15 Cr advisory mandate, exposing why enterprise DPDPA is 96% hardware/software systems integration.
- [Engineering Blog: The ₹5,000/mo Virtual DPO Scam](https://kavachprivacy.in/blog-vdpo-scam-dpdpa): Statutory teardown of DPDPA Section 2(l) and Section 10 debunking the vDPO retainer racket. Explains why 99% of Indian startups do not need a DPO, how SDF criteria operate, and how to set up an in-house Section 8(9) Grievance Officer for ₹0.
- [Procurement Intelligence: Big 4 Sweep ₹3.50 Cr in Banking DPDPA Tenders](https://kavachprivacy.in/news-big-4-banking-tenders): Commercial disclosures confirm public sector DPDPA awards across NABARD (EY at ₹1.30 Cr), Indian Overseas Bank (Deloitte at ₹89L), and Union Bank of India (KPMG at ₹87.08L and Leegality at ₹45L), analyzing the runtime defensibility gap against ₹250 Cr statutory fines under Section 8(5).
- [Procurement Intelligence: PSU Banking & Finacle Core Rewiring](https://kavachprivacy.in/news-psu-banking): Technical analysis of Bank of Baroda's 5-minute Finacle consent rule, Central Bank's AI mainframe discovery, J&K Bank's 22-language portal, SBI Payments, and LIC's 24 onsite experts. Sourced from official bank websites, Central Vigilance Commission (CVC) disclosures, and Government e-Marketplace (GeM) public procurement tenders.
- [Procurement Intelligence: ₹58.46 Crore DPDPA Contracts Disclosed](https://kavachprivacy.in/news-spend-disclosure): Empirical breakdown of enterprise procurement contracts across ₹82 Lakhs for external consultants, ₹5.36 Crore for Digital Lending change requests, and ₹52 Crore in System Integrator infrastructure customizations.
- [News & Regulatory Updates Hub](https://kavachprivacy.in/news): Up-to-date portal covering verified public procurement, banking tenders, and real-world statutory developments.
- [Official DPDP Rules, 2025 (G.S.R. 846(E)) Statutory Portal](https://kavachprivacy.in/rules): Complete, 100% verbatim gazetted rules, schedules, and cross-references.
- [Engineering Blog: DPDPA 2027 Transition Period & Compliance Deadline](https://kavachprivacy.in/blog-dpdpa-compliance-deadline-2027-transition-period): Technical breakdown of the 18-month transition runway to 13 May 2027. Covers legacy database remediation, continuous consent state machine orchestration, multi-identifier graph mapping, and third-party runtime interceptors to avoid ₹250 Cr Section 8(5) statutory fines.
- [Engineering Blog: S3 Glacier Backups & Crypto-Shredding Under Rule 8](https://kavachprivacy.in/blog-crypto-shredding-backups): Architectural teardown of DPDPA Section 12(3) & Rule 8 erasure obligations vs immutable S3 Glacier/WORM cold backups. Covers row-level envelope crypto-shredding, KMS zeroization consumers, and cryptographic proof of erasure for DPBI defense.
- [Engineering Blog: Medical Research & Health AI Exemption Guide](https://kavachprivacy.in/blog-medical-research-exemption): Deep-dive into DPDP Act Section 17(2)(b), Rule 16, and Second Schedule standards for Indian clinical trial biobanks, genomics platforms, and HealthTech AI model training architectures.
- [Engineering Blog: FinTech Data Retention vs RBI Mandates](https://kavachprivacy.in/blog-fintech-retention): Reconciling DPDP Act Section 8(7) data erasure with RBI Master Direction on KYC & PMLA 5-year retention rules for Indian FinTechs, NBFCs, and Digital Lending Apps.
- [Engineering Blog: Debt Recovery & Shadow Calling](https://kavachprivacy.in/blog-shadow-calling): How the DPDP Act dismantles rogue recovery agency tactics (burner numbers, contact scraping, relative harassment) with up to ₹250 Cr statutory fines and BNS 351 escalation.
- [Engineering Blog: B2B SaaS Architecture](https://kavachprivacy.in/blog): Multi-tenant DSAR scaling, log sanitization, and dual-hat role clarity for Indian B2B SaaS.
- [Engineering Blog: FinTech Lending Architecture](https://kavachprivacy.in/blog-lending): Unbundled consent under Section 6, silent credit bureau inquiries (CIBIL/Experian), RBI DLG synergy, and ₹250 Cr penalty mitigation.
- [Engineering Blog: Omnichannel CMP & Section 5 Notice Architecture](https://kavachprivacy.in/blog-omnichannel-cmp-may-2027): Blueprint for multi-channel consent capture across WhatsApp, SMS, Branch kiosks, and mobile apps.
- [Engineering Blog: DPDPA Commercial Opportunities & Public Sector Tenders](https://kavachprivacy.in/blog-dpdpa-business-opportunities-tenders): Analysis of public procurement tenders, PSU bank vendor mandates, and private enterprise compliance RFP trends.
- [Competitor Comparison Hub: Kavach vs Alternatives](https://kavachprivacy.in/compare): Side-by-side evaluations of Kavach Sovereign CMP against OneTrust, Cookiebot, CookieYes, Privy, and dcomply covering DPDPA §6 affirmative consent, India data residency, 22 languages, and INR pricing.
- [Competitor Teardown: OneTrust vs Kavach Privacy](https://kavachprivacy.in/compare-onetrust-cookiebot-alternative): Architectural comparison detailing why OneTrust's ~230KB script, $11,500/yr USD median cost, and Azure US/EU data residency compare against Kavach Sovereign CMP.
- [Competitor Teardown: Cookiebot vs Kavach Privacy](https://kavachprivacy.in/compare-cookiebot): Technical analysis of Cookiebot (Usercentrics) script rewriter, Denmark/EU cloud hosting, subpage EUR pricing tiers, and lack of Indian vernacular language support.
- [Competitor Teardown: CookieYes vs Kavach Privacy](https://kavachprivacy.in/compare-cookieyes): Why a cookie banner is only 10% of India's DPDPA, sub-5-minute downstream revocation sync webhooks, minor age verification, and court-admissible audit proof.
- [Competitor Teardown: Privy (by IDfy) vs Kavach Privacy](https://kavachprivacy.in/compare-privy): Developer-first <12KB sovereign CMP vs 90-day legacy banking governance suite, comparing implementation velocity, live DOM tracker radar, and transparent domestic INR pricing.
- [Competitor Teardown: dcomply vs Kavach Privacy](https://kavachprivacy.in/compare-dcomply): Specialized zero-leak privacy engineering platform vs broad 89-module corporate compliance portal across GST, MCA, POSH, and Labour laws.
- [Engineering Blog: Foreign Companies & Extraterritorial DPDPA Compliance](https://kavachprivacy.in/blog-foreign-companies-dpdpa-compliance): Guide for multinational companies, global SaaS vendors, and offshore processors handling Indian digital personal data.

## Entity & Contact Information

- **Organization**: Kavach Privacy Technologies
- **Location**: Chennai, Tamil Nadu, India
- **Direct WhatsApp Chat**: [Chat on WhatsApp (Direct 1-Tap)](https://wa.me/919791388549)
- **Website**: https://kavachprivacy.in/
- **Engagements**: Custom-scoped sprint packages based on microservice complexity, data scale, and compliance architecture.
- **Full Knowledge Ingestion**: [llms-full.txt](https://kavachprivacy.in/llms-full.txt)