medinsdpdp@gmail.com +91 6262262691
Our Approach

Understand. Assess. Design. Implement. Strengthen.

One integrated process — from first conversation to ongoing support — that builds compliance frameworks organisations actually use.

The five steps

A repeatable process, tailored every time

Every engagement moves through the same five steps — but the substance of each step is built around your organisation, your operations and your regulatory landscape.

01

Understand

Your organisation, operations, technology environment and regulatory landscape.

Shared baseline
02

Assess

Compliance gaps, operational vulnerabilities and areas of regulatory risk.

Gap register
03

Design

An organisation-specific compliance and risk framework, built for your reality.

Target framework
04

Implement

Requirements translated into policies, processes, controls and documentation.

Live controls
05

Strengthen

Continuing support to maintain and improve your compliance posture over time.

Sustained posture
In more detail

Inside each step

Step 01

Understand

Discovery

Before anything is fixed, we understand what already works.

  • Structured interviews with legal, tech, ops, product and business owners.
  • Review of existing policies, contracts, security controls and vendor arrangements.
  • Mapping of your regulatory perimeter — sectoral and cross-sectoral.
Step 02

Assess

Diagnosis

A single gap register that legal, cyber and business can all agree on.

  • Rule-by-rule DPDP gap assessment against current state.
  • Security & data-flow diagnostics — not just a paperwork audit.
  • Prioritisation by regulatory risk, operational impact and effort.
Step 03

Design

Blueprint

A framework designed around your reality — not a generic template.

  • Target-state framework: governance, policies, controls, records.
  • Consent, notice and grievance flows built on your actual customer journeys.
  • Roles, RACI and decision rights — written for real accountability.
Step 04

Implement

Build

Where most compliance programmes stall — and where we spend the most time.

  • Policies, SOPs, notices and consent artefacts drafted and rolled out.
  • Security & data controls stood up with your engineering teams.
  • Training, awareness and change-management support for the people using them.
Step 05

Strengthen

Ongoing

Compliance is not a one-off — and neither is our support.

  • Retainer support for regulator queries, breach response and board reporting.
  • Periodic reviews as your business, technology and regulation evolve.
  • Vendor and third-party risk monitoring as your ecosystem grows.
What runs through every step

Three principles behind the process

A

Practical over performative

Every artefact is designed to be used, not filed. If a policy will not survive first contact with operations, we redraft it.

B

One integrated team

Legal, cyber and business perspectives at the same table — from the discovery interview to the incident debrief.

C

Transparent, always

You see the working — the register, the trade-offs, the residual risks — not just a polished final deck.

Let’s design your compliance framework

From first assessment through to ongoing support — one integrated process, built for your organisation.

Talk to Us Explore Our Services