1. Home
  2. Trust and India data residency

Trust

Trust and India data residency

What we do with the personal data you put into TruePrivacy, and what we do not claim.

Updated 4 Nov 2026

Short answer

TruePrivacy offers India data residency for customer personal data where offered, controls access with SSO and MFA, and logs every action in an audit trail. We keep a subprocessor list and give notice of changes. We list no certifications on this site.

India data residency

India data residency for customer personal data is available where offered. If you need personal data to stay in India, raise it when you ask for a quote and we will confirm what applies to your plan.

Access control and audit trail

Access to your workspace is controlled, with SSO and MFA. Every action is logged in an audit trail with the before and after values, and the trail can be exported as CSV.

When TruePrivacy scans your systems, samples are masked by the scanner before they leave the source. The DSPM endpoint agent reports findings with masked samples, not the raw files.

Subprocessors

We keep a list of our subprocessors and give notice of changes. Ask for the current list through the contact page.

Your own vendors need the same care. Vendors and processors tracks their risk, assessments and contracts.

What we do not claim

We do not list any security certifications on this site. Using TruePrivacy helps you manage DPDP work, but it does not by itself make you compliant. If your security review needs details that are not on this page, ask us through the contact page.

Sources

  • Digital Personal Data Protection Act, 2023 (Act No. 22 of 2023)
  • Digital Personal Data Protection Rules, 2025, G.S.R. 846(E), 13 November 2025

Updated 4 Nov 2026. Educational information, not legal advice.

Questions, answered

Educational, not legal advice.

All DPDP FAQs
Is customer personal data stored in India?

India data residency for customer personal data is available where offered. Ask about it when you request a quote.

Do you use subprocessors?

Yes. We keep a subprocessor list and give notice of changes. Ask us for the current list.

Do scans copy raw personal data out of our systems?

The scanner masks samples before they leave the source, and the DSPM endpoint agent reports findings with masked samples, not the raw files.

Does TruePrivacy hold security certifications?

We do not list any certifications on this site. For questions your security review needs answered, contact us.

Your DPDP plan, starting today

Core obligations for data fiduciaries begin on 13 May 2027.

13 May 2027

Core obligations begin