Certinal makes DPDP compliance an operating standard for every Data Fiduciary - every consent captured, signed, purpose-tagged, and audit-ready for the Data Protection Board.
Recognized by analysts. Chosen by organizations worldwide.
Named a Leader in the IDC MarketScape
Recognized in Gartner Peer Insights Voice of the Customer
Rated by verified enterprise reviewers on Gartner Peer Insights
Featured in a Gartner Market Guide
Under the DPDP Act, every customer and employee record you hold digitally is in scope, and the penalties are not symbolic. A single leaked record, an unlogged consent, or a missed breach notice can put you in front of the Data Protection Board of India - with fines assessed per instance.
The cost of getting it wrong
One mishandled record can cost up to ₹250 crore
Every digital record and consent form is covered
Levied on your organisation, decided by the Data Protection Board
Stacked on top of regulator scrutiny and reputational fallout
DPDP Act · Penalty schedule
₹250 CrFailure to take reasonable security safeguards, leading to a data breach
₹200 CrFailure to notify a breach to the Board and those affected
₹200 CrBreach of additional obligations around children's and minors' data
₹150 CrNon-fulfilment of Significant Data Fiduciary duties, such as a DPO, DPIAs and audits
₹50 CrBreach of any other provision of the Act or its Rules
Before the Board asks - who owns DPDP?
01
Name an accountable owner
Significant Data Fiduciaries must appoint an India-based Data Protection Officer, answerable to the Board.
02
Answer rights in 90 days
Access, correction, and erasure across your CRM, ERP, billing, and every vendor holding a person's data - captured and evidenced on time.
03
Show your working
Purpose-tagged consent, DPIAs, and independent audit records kept ready as a by-product of everyday operations.
Self-serve Privacy Portal. Rights Request Portal. Data Principal Engagement Portal.
Why Certinal
What makes Certinal different
Consent, compliance and signatures on one platform, typically live in about a week, inside the systems your teams already run.
Three pillars, one platform
DPDP consent management, healthcare consent and enterprise eSignatures in one consent and compliance platform, with every consent event and signature on one audit trail.
DPDP consent management
Healthcare consent
Enterprise eSignatures
7 daystypical time to go live
Live in about a week
The Certinal consent platform is typically deployed in around 7 days, so compliant capture starts almost immediately.
1000+integrations
Inside the systems you run
1000+ integrations connect Certinal to your CRM, ERP, HRMS and EHR, writing completed records back, with free API access on every plan.
LeaderIDC MarketScape, 2023
Recognized by IDC and Gartner
Named a Leader in the IDC MarketScape for worldwide eSignature, featured in a Gartner Market Guide, and rated by verified enterprise reviewers on Gartner Peer Insights.
20M+users worldwide
1M+documents signed monthly
Proven at enterprise scale
One platform carries consent and signatures for hospital networks and global brands alike.
ISO 27001certified, SOC 2 Type II audited
Certified security
Certified and independently audited controls over how personal data is stored, processed, and transmitted.
Hospital network80%
Reduction in patient check-in wait times, with 100% automated, audit-ready consent logs across 70+ hospitals and 10,000+ beds.
One of Asia's largest healthcare networks
Early adopter1 week
To switch to Certinal, with major cost savings along the way.
An early eSignature adopter that switched to Certinal
Customer NPS81
Net Promoter Score from Certinal customers: how strongly they would recommend the platform to a peer.
Customers in 35+ industries
Compliance, mapped in
Consent management starts with compliance
Enforceable agreements and protected personal data, mapped to the Indian laws, global privacy rules, and security certifications regulated enterprises are held to.
Indian law
DPDP Act 2023DPDP Rules 2025IT Act 2000
Audit-ready in step
Global & security
GDPRISO 27001SOC 2 Type II
Purpose-tagged consent
Every consent timestamped, versioned, and exportable as proof on demand.
Section 5 (IT Act) electronic signatures for consent forms, records, and most commercial agreements - admissible in Indian courts.
DPDP Section 6, built in
Purpose-based capture, granular notice, and Data Principal rights for every kind of personal data - consent that stands up to the Data Protection Board and your auditors.
Enforcement clock · Live
Enforcement·May 13, 2027
The window is closing
Enforcement is months away
The law is not theoretical anymore. The work runs in sequence - map the data, serve fresh notices, then stand up consent and rights.
--Days
--Hrs
--Min
--Sec
May 13, 2027Enforcement deadline
Enforcement May 13, 2027
Today
11 Aug 2023 · Enacted
Now · Transition
May 2027 · Enforcement
The window is closing
From enacted to enforced - and where you stand today
2023of 2023-2027
The law2023
DPDP Act enacted
Passed by Parliament as India's data protection law
Whoever decides how data is used is a Data Fiduciary
The law2025
Rules notified
The transition begins - months, not years
Consent, rights, and breach workflows become expected practice
The transitionNow
Map the data
Every place personal data is captured, shared, or stored
A named purpose against each processing activity
The transition+90d
Serve fresh notice
Itemised notice in the Data Principal's chosen language
Legacy consent re-papered against Section 6
The transition+6mo
Stand up consent and rights
Purpose-tagged capture at sign-up and onboarding
Access, correction, and erasure routed on a 90-day SLA
The deadline2027
Penalties active
Board inquiries, audits, and Data Principal complaints
Up to ₹250 crore assessed per instance against you
How Certinal works
Consent, rights, and proof in one platform
01
Ownership
The Act names who answers for compliance, all the way up.
Organisations designated as Significant Data Fiduciaries must appoint a Data Protection Officer, based in India, responsible to the Board or similar governing body.
Board of Directors. Ultimately accountable for compliance across every business unit and function.
Data Protection Officer. Appointed by Significant Data Fiduciaries, answers to the Board.
Operations teams. Execute, evidence, and audit every consent, with Certinal as the system of record.
1named, accountable owner
Boardlevel accountability
Board of DirectorsUltimately accountable for compliance
Data Protection OfficerAppointed by SDFs · answers to the Board
Operations teamsExecute, evidence, and audit consent
02
Rights
Access, correction, and erasure of personal data, across your CRM, ERP, billing, and every vendor holding that person's records.
Done manually, one request can burn weeks of staff time.
One intake for every right. Access, correction, and erasure requests captured in a single place.
Automated routing. Requests fan out across the CRM, ERP, HRMS, and vendors that hold the data.
SLA tracking. Every request actioned and evidenced within the timelines the Act expects.
90days, tracked automatically
1place to run it all
90d
Access requestFulfilled · evidence attached
Correction requestSynced to 4 systems
Erasure requestIn progress · day 6 of 90
03
Evidence
When the Board, an auditor, or the Data Protection Board asks, leadership needs proof on hand, not a project to assemble it.
Certinal keeps the evidence ready as the work happens.
Independent data audits. Consent records structured so external auditors can verify without archaeology.
DPIAs for high-risk processing. Impact assessments for high-risk data flows, captured and versioned where the processing happens.
Purpose-tagged consent, on demand. Every consent timestamped, versioned, and exportable as proof.
Auditready, every day
Proofon demand, not on request
Audit-ready
Every consent captured, signed, purpose-tagged, and audit-ready - for the Data Protection Board and your auditors.
Integrations
Connects to the systems you already run
Trigger consent and signing from your CRM, ERP, HRMS, or customer portal, then get every signed record synced straight back. Free API access on every plan lets your team embed consent capture into any workflow.
Your business stack
CRM & Sales
ERP & Procurement
HRMS & Onboarding
Customer Portal & App
Identity & SSO
EHR, EMR & HIS
CertinalDPDP Consent & Compliance Platform
Back in your systems
Captured, stored & auditablewith a full DPDP audit trail
System of record · Live now
Consent, end to end
One system of record
Certinal keeps every consent, rights request, and audit artefact in one place - so compliance happens as you work, not in a scramble before an audit.
Purpose-tagged consentEvery consent timestamped, versioned, and exportable as proof.
Data Principal rightsAccess, correction, and erasure captured in one intake with SLA tracking.
Automated routingRequests fan out across the CRM, ERP, HRMS, and vendors that hold the data.
DPIAs & auditsImpact assessments and independent audit records, versioned where processing happens.
Breach workflowsNotifications and evidence kept ready for the Data Protection Board.
Proof
Evidence from every pillar
DPDP consent
100%Purpose-tagged
Sec 6Consent built in
90Day rights SLA
Consent captured against clear notices, purpose-tagged and ready for the Data Protection Board.
eSignatures
1M+Docs signed monthly
IDCMarketScape Leader, 2023
Agreements, onboarding, and approvals signed on the same platform, with a full audit trail.
Healthcare consent
80%Shorter check-in waits
93%Sign digitally
Patient intake, admission, and procedure consent captured digitally with the audit trails regulated care demands.
Platform
FreeAPI on every plan
7 daysTypical go-live
Consent and signing triggered from your own systems, every record synced straight back.
Certinal customers and platform figures, 2026 · results vary by deployment and workflow.
Scale
Built for the scale enterprises run on
20M+
Users worldwide
1M+
Documents signed monthly
1000+
Integrations
70+
Hospitals on one customer network
35+
Industries served
7 days
Typical time to go live
Recognition & certifications
Analyst-recognized. Compliance-certified.
Named a Leader in the IDC MarketScape
Featured in a Gartner Market Guide
Recognized in Gartner Peer Insights Voice of the Customer
Rated by verified enterprise reviewers on Gartner Peer Insights
Consent built for DPDP Section 6, for every kind of personal data
Legally valid electronic records and authentication in India
