The all-in-one, end-to-end
DPDP compliance programme.
One team. One accountable owner. You build your business. Sanctum handles DPDP.
DPDP is three kinds of work.
Legal
Consent notices. Contracts. Grievances. Policies.
Ayush Sahay Technology
Consent governance platform. Implementation. Training.
Gopal Bhageria Privacy Ops
Data maps. Gap assessment. Evidence. Breach response.
Sushant Pasumarty Most companies split the work three ways.
A law firm for the policies.
A tech vendor for the systems.
A consultant for the report.
Each answers for their own piece.
The coordination
lands on you.
Sanctum puts all three under one programme.
MBS is accountable.
MBS owns the outcome.
Three ways to buy DPDP compliance.
Two of them leave the hardest work with you.
Option one
A DPDP software platform
You get a dashboard and a consent widget. Your legal position, contracts, grievance process, implementation, and training stay with you. Nobody is accountable for the outcome.
Option two
A DPDP consultant
You get a gap report and a recommendation, often for whichever software is cheapest. The legal position is missing, and the fixes are still yours to make.
Option three
Sanctum, the all-in-one programme
Meridian Bridge Strategy is accountable for the outcome. Sushant Pasumarty does the work with your team. Dayitva Legal provides the legal opinion. AllyComp AI and Sujosu Technology provide implementation and tooling.
How Sanctum runs.
Seven steps from zero clarity to complete compliance.
- 1
Data map
Where personal data rests and how it moves.
Sushant Ayush - 2
Legal opinion
Your role and duties, settled in writing.
Sushant Ayush - 3
Gap analysis
Every gap with evidence, a fix, and an owner.
Sushant Ayush - 4
Recommendations
A practical action plan your team can run.
Sushant Ayush - 5
Implementation and training
We fix the gaps with you and train your people.
Sushant Ayush Gopal - 6
Final readiness opinion
A written readiness view once the fixes hold.
Sushant Ayush Gopal - 7
Breach retainer
On call for breaches, audits, and new rules.
Sushant Ayush Gopal
Three firms. One programme.
Sushant Pasumarty
Does the work, with your team
Meridian Bridge Strategy
Ten years in product and technical sales across cybersecurity, KYC, and identity. CyberArk, Cyware, IDfy.
Ayush Sahay
Dayitva Legal provides the legal opinion
Dayitva Legal
Ten years in data protection law. Shardul Amarchand Mangaldas, JioHotstar, Anand and Anand, EY.
Gopal Bhageria
AllyComp AI and Sujosu Technology provide implementation
AllyComp AI / Sujosu Technology
25+ years in technology at IBM and PwC. IBM Master Inventor with 40 US patents.
Five free tools cover all of DPDP.
Learn the law. Check your risk. Price the work. Follow the changes. See the proof. Free to use today.
The DPDP Bible
The definitive plain-English guide to India's DPDP Act 2023. Understand penalties up to ₹250 Cr, your obligations as a Data Fiduciary, and what compliance actually means.
- Plain-English explanations
- Penalty breakdown & timeline
- Legal advisor-backed content
The DPDP Audit
Free 60-second liability calculator. Map your data processors, check compliance gaps, and get your potential liability score instantly. No signup required.
- 60-second swipe-based audit
- Instant liability score
- Free – no signup needed
The DPDP Workshop
Get market pricing for your DPDP compliance. 2-day intensive workshop with cost calculator. Know exactly what compliance costs before you commit.
- Personalized cost calculator
- 2-day hands-on intensive
- Free – get pricing in 2 min
DPDP News
Follow what changed. A daily digest of DPDP rules, enforcement, deadlines, and what each one means for your business.
- Daily digest, every morning
- Rules and enforcement tracked
- Free, no sign-up
State of Privacy
See the evidence. A public benchmark of how 100+ Indian companies handle personal data, captured and locked as proof.
- 100+ companies benchmarked
- Evidence-locked findings
- Free public report
Go Straight to the Source
Access the official government documents directly from the Ministry of Electronics and Information Technology (MeiTY).
MeiTY Official Website
Ministry of Electronics and Information Technology - the nodal agency for DPDP implementation.
Visit WebsiteDPDP Act 2023
The Digital Personal Data Protection Act, 2023 - the foundational legislation (PDF).
Download PDFDPDP Rules 2025
The newly released implementation rules that operationalize the Act (PDF).
Download PDFAll-in-one DPDP compliance, answered.
What is an all-in-one DPDP compliance programme? +
One programme that covers every part of DPDP compliance: legal position, data mapping, gap analysis, implementation, tooling, training, a written readiness opinion, and breach cover. Meridian Bridge Strategy is accountable for the outcome, Sushant Pasumarty does the work, and Dayitva Legal, AllyComp AI and Sujosu Technology provide the services. You never stitch together vendors and consultants yourself.
How is Sanctum different from DPDP compliance software? +
Software gives you a dashboard and a consent widget. Implementation, legal position, contracts, grievance handling, and training stay with you. Sanctum does that work with you, end to end, and picks and runs the right tools as part of the programme.
How is Sanctum different from a DPDP consultant? +
A consultant hands you a gap report and a recommendation. Sanctum adds a settled legal opinion from Dayitva Legal, fixes the gaps with your team, trains your people, and gives a written readiness opinion once the fixes hold.
Is DPDP compliance mandatory, and for whom? +
Yes. The DPDP Act 2023 applies to every organisation that processes digital personal data of people in India, including startups, SMEs, hospitals, schools, NBFCs, and e-commerce. The duties scale with your role and the data you hold.
What is the DPDP compliance deadline? +
The DPDP Rules 2025 phase in obligations through 13 May 2027, when the full set of data fiduciary duties becomes enforceable. Consent notices, grievance redressal, and breach reporting need to be working before that date.
What are the penalties under the DPDP Act? +
The Data Protection Board can levy penalties up to Rs 250 crore per instance for failures like inadequate security safeguards, with separate caps for breach notification and children's data failures.
How long does the Sanctum programme take? +
Data map, legal opinion, gap analysis, and recommendations typically land within the first six to eight weeks. Implementation and training run with your team after that, followed by the final readiness opinion. The breach retainer stays on after.
What does DPDP compliance cost? +
It depends on your data footprint, sector, and how much implementation you want done for you. Book a clarity call and you get a clear scope and a quote after the first conversation.
Why This Matters
India's DPDP Act 2023 enforcement begins May 13, 2027. Penalties range from ₹50 Cr to ₹250 Cr per violation. Most businesses don't know where they stand.
Ready when you are.
Book a free 30-minute clarity call with the Sanctum team. You get honest answers about where you stand under the DPDP Act.
Book a clarity callWhether you know it as Meridian DPDP or DPDP Meridian, you are in the right place. Sanctum is the all-in-one, end-to-end DPDP compliance programme from Meridian Bridge Strategy. Some call it holistic, unified, or one-stop DPDP compliance, a DPDP compliance program, or simply all-in-one compliance for India. It is the all-in-one data protection and privacy compliance programme for Indian companies. Legal, implementation, tooling, training, and proof under one accountable owner, built on one network of tools and advisory surfaces that help Indian businesses meet their obligations under the DPDP Act 2023.