Used by lawyers and legal teams at
Bombay High Court
Physics Wallah
ExtendEvery duty, checked against your documents
Each duty under the Act and the Rules
Notice, consent, purpose, retention, security, breach reporting, children's data: where you stand on each, and what is missing.
- Notice before asking for consentDone1
- Consent free, specific and unambiguousDone2
- Withdrawing consent as easy as giving itPartly3
- Parents' consent for children's dataMissing4DPDP Act, 2023 · Section 9(1)…obtain verifiable consent of the parent of such child…
- Data breach reported to the BoardMissing5
- Data erased when its purpose endsPartly6
Every vendor contract in one table
Which processors have processing terms, where the data goes, and which contracts need an amendment.
| Contract | Change of control | Liability cap |
|---|---|---|
| Stratacore MSA | Yes | ₹2 cr |
| Orbitly SaaS | No | Uncapped |
| Clevercast | Yes | ₹50 lakh |
| Nimbus lease | No | ₹1 cr |
| Halden NDA | No | ₹25 lakh |
| Vantage hosting | Yes | 12 months |
| Pallav logistics | No | ₹75 lakh |
| Kestrel payroll | Yes | ₹40 lakh |
| Meridian cloud | No | Uncapped |
- No cap on the Supplier
- Insurance not stated
- Confidentiality is standard
The privacy policy, line by line
Each statement checked against what the Act requires a notice to say, with the wording to fix.
9. Limitation of liability
9.1 Except for a breach of Clause 14 (Confidentiality), the Supplier's total liability under this Agreement shall be unlimited .
9.2 Neither party shall be liable for any indirect or consequential loss, including loss of profit.
10. Indemnity
10.1 The Customer shall indemnify the Supplier against all claims .
Breach timelines checked
When it was found, who was told and when, against the deadlines that apply.
List of dates
- 14.01.2024Agreement to sell for Flat B-402, Dwarka, at ₹1.2 crore1
- 02.03.2024Advance of ₹25,00,000 paid by RTGS2
- 30.06.2024Date fixed for the sale deed; vendor does not appear3
- 18.11.2024Legal notice for specific performance4Page 88…calls upon you to execute the sale deed within fifteen days of this notice
- 07.02.2025Suit filed before the District Court, Dwarka5
- 23.08.2026Written statement filed; vendor pleads delay6
Limitation
Filed within three years of the refusal · Article 54, Limitation Act 7
What it checks
Each against the DPDP Act 2023 and the DPDP Rules 2025.
Lawyers powered by Justis AI
Solo advocates, firms and in-house teams. One associate for the research, drafting and review that decide a matter.
“It drafts like someone who has read our files”
We used to lose the first two days of every matter to reading in. Justis pulls the chronology, flags the limitation issue, and hands back a draft that already sounds like our firm. Our associates start from an argument now, not a blank page.
“The citations hold up when the bench checks them”
That was the test for us. Every authority it gives is traceable to the reported judgment, and it tells us plainly when a point is unsettled. We have stopped re-verifying research from scratch, which is where the real hours went.
Common questions
What is the DPDP Act?
The Digital Personal Data Protection Act, 2023 is India's data protection law. It governs how businesses collect, use, store and share personal data, and the DPDP Rules, 2025 set out how its duties are carried out.
When do the DPDP duties apply?
The Rules were notified on 13 November 2025. Consent manager provisions apply from 13 November 2026, and the core duties of data fiduciaries from 13 May 2027.
What are the penalties?
Up to ₹250 crore for a single breach of duty, such as failing to take reasonable security safeguards. Penalties are imposed by the Data Protection Board of India.
What documents do I need for the check?
Your privacy policy and notices, consent screens, record of processing, data-request log, incident reports, and contracts with vendors who handle personal data.
Can it check our vendor contracts?
Yes. Put them into Tabular Review and ask the same questions of each. You get one table showing which contracts lack processing terms, each cell linked to its clause.
Is the check legal advice?
It is a detailed first review for your lawyers and compliance team. Every finding cites the document and the provision, and the decisions stay with you.
Can I try it on sample documents?
Yes. The in-house use cases include a full DPDP check on a fictional company's policy, consent screens, records and contracts.
