Frequently Asked Questions
Do I need to do the IT audit before the DPDP assessment?
No. Every service is completely independent. You can buy the DPDP Readiness Assessment on its own without ever doing an IT audit. The two services have significant overlaps if bought together (which is why the combined audit exists at a lower price), but neither requires the other as a prerequisite.
Is my business actually covered by the DPDP Act?
If your business collects any digital personal data — a customer's name, phone number, email address, employee records, payment details, or CCTV footage — you are a Data Fiduciary under the DPDP Act 2023. The DPDP Rules 2025 were notified in November 2025. There is no size threshold. Even a 20-person business with a website contact form is covered.
What does "fixed price" mean — are there extra charges?
Fixed price means the price you see is the price you pay. There are no hourly top-ups, no "out of scope" charges mid-engagement, and no surprises at the end. The price is agreed before work begins and does not change. The only additions would be if you explicitly ask for something beyond the defined scope — which would be quoted separately and approved by you first.
Why aren't all the prices listed exactly on the website?
We show anchor prices — what the service costs for a typical ~40-person MSME in Hyderabad. The actual price varies by your company's headcount, data complexity, number of systems, and geographic scope. Showing a single fixed number would either over-quote smaller businesses or under-quote larger ones. The free discovery call takes 30 minutes and gives you an exact, fixed price commitment — no obligation to proceed.
Can Nitin work with businesses outside Hyderabad?
Yes. All assessments are primarily remote-first. The IT Process Audit includes one on-site visit (travel cost included for Hyderabad, billed at actuals for other cities). The DPDP assessment, retainers, and workshops can be delivered fully remotely. Nitin works with clients across India.
What if I want to start with the retainer without doing an audit first?
The DPDP Retainer works best after a DPDP Readiness Assessment — because the retainer tracks progress against the gap list the assessment produces. That said, talk to Nitin on the discovery call — there are cases where a shorter onboarding assessment can substitute for the full audit to get a retainer started faster.
How soon can work begin after the call?
For the DPDP Assessment, work typically begins within 5–7 business days of engagement confirmation and payment. For the IT Audit or Combined Audit, scheduling depends on availability for interviews and the site visit — usually within 2 weeks. Retainers begin from the 1st of the following month. Workshop sessions are scheduled based on participant availability.
