Trust Builds a Brighter India

Mumbai, India — October 2026

Team Privy by IDfy

Who we are

Privy by IDfy is India's Full Stack DPDP Compliance and Data Privacy Governance Platform.

50+ Enterprises Trust Privy by IDfy.

Getting India’s Enterprises Ready for DPDPA

50+

Enterprises

500M

Data Principals

2B

Consents Governed

10+ PB

Data Landscape Governed

Why Now
Map of India made up of portraits of people across the country

This Is a Defining Moment for Privacy in India

India’s DPDP Rules have put a clear timeline in front of enterprises. But what makes this moment important is bigger than the deadline itself.

For years, businesses have been built around collecting and using more data. Now, enterprises are being asked to think differently about that data. Not simply about consent, but about accountability, purpose, control and trust.

At the same time, AI is changing how quickly and widely data can be used across an organisation. The decisions enterprises make about privacy and data governance today will shape how confidently they are able to adopt AI tomorrow.

This makes the next few months more than a compliance window. It is an opportunity for Indian enterprises to build a stronger foundation for the next phase of digital growth.

And India matters in this conversation. With nearly one in six people in the world living here, the way Indian enterprises build for privacy, trust and responsible data use can become an important example of what governance looks like at population scale.

The deadline will arrive. The bigger question is what enterprises choose to build before it does.

Our Story

Built on 15 Years of Trust, Risk and Identity

Privy grew out of IDfy’s 15 years of working with identity, fraud and risk. Over time, one question became impossible to ignore: how do you give individuals real control over their data, while helping enterprises operationalise that responsibility at scale?

In 2018, Ashok Hariharan, CEO of IDfy, contributed to the Justice Srikrishna Committee that helped shape India’s privacy framework. By 2022, that question had become a mission: build privacy infrastructure that could protect the data rights of 1.4 billion Indians, through the enterprises they interact with every day.

That mission became Privy by IDfy.

From the beginning, the idea was bigger than consent management alone. Privacy had to move from policy to practice, with enterprises able to translate individual rights and regulatory responsibilities into the way data is actually collected, used and managed.

Privy was built around that belief: give people greater control over their data by helping enterprises make privacy operational, accountable and scalable.

The Platform

Three Pillars. Ten Connected Modules. One AI Layer.

Privy is a full stack DPDP compliance platform, not a consent widget bolted onto a bigger promise.

01

Consent Lifecycle Management

Consent governance platform, data principal rights management, cookie manager

02

Continuous Compliance and Risk

Privacy impact assessments, incident management, third party risk management

03

Personal Data Discovery and Governance

Data discovery and classification, automated data lineage, data security posture management, privacy enhancing technologies

Why Privy

Built for India, Not Adapted for It

Winner of the MeitY-NeGD DPDP Innovation Challenge

Ranked #1 for innovation, technical robustness, practical applicability and citizen-centric design.

Backed by 15 Years of Trust Infrastructure

Built on IDfy’s deep experience across identity, fraud and risk, and an understanding of the scale and complexity of Indian enterprises.

Privacy Beyond Consent

Consent is only one part of the picture. Privy brings together consent, data governance, privacy risk, third-party risk, incident management and AI governance in one connected approach.

Built to Operationalise Privacy

Move privacy beyond policies with clear ownership, workflows, approvals and accountability embedded across the organization.

Built for Demonstrable Defence

Create the records, evidence and audit trails needed to demonstrate that privacy controls exist and work in practice.

Designed for Enterprise Speed

Move faster with proven implementation expertise, less rework and the ability to adapt as privacy requirements evolve.

ISO 27001:2013
DSCI
Forbes Asia 100 to Watch
Technology Fast 50 2023 India

Trust & Privacy Platform of the Year

Leadership

Leaders Building India's Trust Infrastructure

Ashok Hariharan

Ashok Hariharan

Founder & CEO, IDfy

MBA, Indian School of Business.BSEE, Penn State University.

Malcolm Gomes

Malcolm Gomes

Chief Operating Officer, IDfy

Privacy & compliance leader.Former McKinsey Partner.

Paritosh Desai

Paritosh Desai

Chief Product & Marketing Officer, IDfy

Product visionary.Data and design expert.

Ashish Sahni

Ashish Sahni

Chief Technology Officer, IDfy

Technology architect.Former Barclays CTO.

Tridib Mukherjee

Tridib Mukherjee

Chief Data Scientist and AI Officer

Arizona State University,Former AI officer Games 24x7.

In Their Words

What Enterprises Say About Working With Privy

  • “It has been a very good experience working with you and the IDfy team. Selecting a privacy technology partner requires more than evaluating product capabilities. We valued IDfy’s understanding of the DPDP landscape and its experience of working with the evolving privacy needs of financial institutions.”

    JJ

    Jitendra Jadhwani

    (Sr Vice President - Cyber Security)

  • “Privacy governance is increasingly becoming a technology and business priority. Privy’s approach stood out for its focus on bringing regulatory requirements and practical privacy management together in a structured way.”

    RS

    Ravendra Singh

    (Head - Engineering & Architecture)

  • “DPDP compliance brings both regulatory and operational considerations for financial institutions. Our conversations with the Privy team demonstrated a practical understanding of these requirements and how they translate into enterprise environments.”

    PD

    Prashant Deshpande

    (Chief Information Security Officer & Data Protection Officer)

  • “Privacy and governance are continuing to evolve as boardroom priorities across organisations. Throughout our engagement, discussions with the Privy team have been grounded in a clear understanding of regulatory expectations and the practical considerations involved in operationalising them.”

    SB

    Shruti Bagri

    (Manager - Legal and Compliance)

  • “Many important initiatives require balancing structure with practicality. We’ve appreciated the collaborative nature of discussions with the Privy team and the effort to understand how decisions translate into day-to-day operations.”

    NG

    Nilanjan Ghose

    (Chief Compliance and Administrative Officer)

  • “We have evaluated various solutions and shortlisted IDfy as they have helped with deciphering the Digital Personal Data Protection Act (DPDPA) guidelines and providing the tech solution, which has led to a longstanding partnership.”

    PM

    Praveen Mishra

    (CISO & SVP)

  • “At Axis Bank, data privacy and customer trust are our top priorities. Our collaboration with Privy marks a significant step toward strengthening compliance while enhancing customer experience.”

    NB

    N. Balaji

    (President & Head - Business Intelligence Unit (BIU))

  • “Balancing compliance and customer experience has always been important for us. With Privy, we now have a compliant and transparent consent management system that not only ensures regulatory alignment but also delivers a smoother experience for our users. It gives us the confidence to manage consent effectively while offering customers the clarity and control they deserve.”

    SS

    Sayed Suleman

    (CTO)

Questions

Frequently Asked

Privy by IDfy is India's full-stack DPDP compliance and data privacy governance platform, built by IDfy. It covers consent, data discovery, risk, and incidents in one system.

Consent is one module among ten across three pillars. Privy also covers data discovery, privacy impact assessments, incident management, and third party risk, all under one platform.

Yes. Privy is the winner of the MeitY-NeGD DPDP Innovation Challenge, a distinction foreign platforms cannot hold under Indian law.

InspectAI is Privy's AI compliance copilot. It scans live digital journeys for DPDPA compliance gaps as they occur, rather than relying on periodic manual audits.

The DPDP Rules were notified on 13 November 2025. Consent Manager registration opens 13 November 2026, and substantive obligations become effective from 13 May 2027, with penalties of up to ₹250 crore per contravention.

Privy today governs privacy programmes for 50+ enterprises, covering more than 500 million data principals and over 2 billion consents.

Your DPDP Journey Starts Here

Talk to the Privy team about what DPDP readiness looks like for an enterprise your size.