The all-in-one, end-to-end
DPDP compliance programme.
One team. One accountable owner. You build your business. Sanctum handles DPDP.
DPDP is three kinds of work.
Legal
Consent notices. Contracts. Grievances. Policies.
Technology
Consent governance platform. Implementation. Training.
Privacy Ops
Data maps. Gap assessment. Evidence. Breach response.
Most companies split the work three ways.
A law firm for the policies.
A tech vendor for the systems.
A consultant for the report.
Each answers for their own piece.
The coordination
lands on you.
Sanctum puts all three under one programme.
MBS is accountable.
MBS owns the outcome.
Three ways to buy DPDP compliance.
Two of them leave the hardest work with you.
Option one
A DPDP software platform
You get a dashboard and a consent widget. Your legal position, contracts, grievance process, implementation, and training stay with you. Nobody is accountable for the outcome.
Option two
A DPDP consultant
You get a gap report and a recommendation, often for whichever software is cheapest. The legal position is missing, and the fixes are still yours to make.
Option three
Sanctum, the all-in-one programme
Meridian Bridge Strategy is accountable for the outcome. Sushant Pasumarty does the work with your team. Dayitva Legal provides the legal opinion. AllyComp AI and Sujosu Technology provide implementation and tooling.
How Sanctum runs.
Seven steps from zero clarity to complete compliance. Step one is the map: see how MBS maps data.
- 1
Data map
Where personal data rests and how it moves.
- 2
Legal opinion
Your role and duties, settled in writing.
- 3
Gap analysis
Every gap with evidence, a fix, and an owner.
- 4
Recommendations
A practical action plan your team can run.
- 5
Implementation and training
We fix the gaps with you and train your people.
- 6
Final readiness opinion
A written readiness view once the fixes hold.
- 7
Breach retainer
On call for breaches, audits, and new rules.
Who does what.
Sushant Pasumarty
Leads the programme and does the work with your team
Meridian Bridge Strategy
Ten years in product and technical sales across cybersecurity, KYC, and identity. CyberArk, Cyware, IDfy.
Ayush Sahay
Dayitva Legal provides the legal opinion
Dayitva Legal
Ten years in data protection law. Shardul Amarchand Mangaldas, JioHotstar, Anand and Anand, EY.
Gopal Bhageria
AllyComp AI and Sujosu Technology provide implementation
AllyComp AI / Sujosu Technology
25+ years in technology at IBM and PwC. IBM Master Inventor with 40 US patents.
Five free tools cover all of DPDP.
Learn the law. Check your risk. Price the work. Follow the changes. See the proof. Free to use today.
The DPDP Bible
The definitive plain-English guide to India's DPDP Act 2023. Understand penalties up to ₹250 Cr, your obligations as a Data Fiduciary, and what compliance actually means.
- Plain-English explanations
- Penalty breakdown & timeline
- Legal advisor-backed content
The DPDP Audit
Free 60-second liability calculator. Map your data processors, check compliance gaps, and get your potential liability score instantly. No signup required.
- 60-second swipe-based audit
- Instant liability score
- Free – no signup needed
The DPDP Workshop
Get market pricing for your DPDP compliance. 2-day intensive workshop with cost calculator. Know exactly what compliance costs before you commit.
- Personalized cost calculator
- 2-day hands-on intensive
- Free – get pricing in 2 min
DPDP News
Follow what changed. A daily digest of DPDP rules, enforcement, deadlines, and what each one means for your business.
- Daily digest, every morning
- Rules and enforcement tracked
- Free, no sign-up
State of Privacy
See the evidence. A public benchmark of how 100+ Indian companies handle personal data, captured and locked as proof.
- 100+ companies benchmarked
- Evidence-locked findings
- Free public report
Go Straight to the Source
Access the official government documents directly from the Ministry of Electronics and Information Technology (MeiTY).
MeiTY Official Website
Ministry of Electronics and Information Technology - the nodal agency for DPDP implementation.
Visit WebsiteDPDP Act 2023
The Digital Personal Data Protection Act, 2023 - the foundational legislation (PDF).
Download PDFDPDP Rules 2025
The newly released implementation rules that operationalize the Act (PDF).
Download PDFAll-in-one DPDP compliance, answered.
What is an all-in-one DPDP compliance programme? +
One programme that covers every part of DPDP compliance, with one accountable owner.
- Legal position and contracts
- Data mapping and gap analysis
- Implementation and tooling
- Team training
- A written readiness opinion
- Breach cover
Meridian Bridge Strategy owns the outcome. Sushant Pasumarty does the work with your team, with Dayitva Legal, AllyComp AI and Sujosu Technology as fulfilment partners.
How is Sanctum different from DPDP compliance software? +
Software gives you a dashboard and a consent widget.
- Implementation, legal position, contracts, grievance handling, and training stay with you.
- Sanctum does that work with you, end to end.
- The programme picks and runs the right tools for you.
How is Sanctum different from a DPDP consultant? +
A consultant hands you a gap report and a recommendation.
- Sanctum adds a settled legal opinion from Dayitva Legal.
- We fix the gaps with your team and train your people.
- You get a written readiness opinion once the fixes are working.
Is DPDP compliance mandatory, and for whom? +
Yes. The DPDP Act 2023 applies to every organisation that processes digital personal data of people in India.
- That includes startups, SMEs, hospitals, schools, NBFCs, and e-commerce.
- The duties scale with your role and the data you hold.
What is the DPDP compliance deadline? +
The DPDP Rules 2025 phase in obligations through 13 May 2027, when the full set of data fiduciary duties becomes enforceable.
Consent notices, grievance redressal, and breach reporting need to be working before that date.
What are the penalties under the DPDP Act? +
The Data Protection Board can levy penalties up to Rs 250 crore per instance.
- The top band covers failures like inadequate security safeguards.
- Breach notification and children's data failures carry separate caps.
How long does the Sanctum programme take? +
The first deliverables land within six to eight weeks.
- Weeks one to eight: data map, legal opinion, gap analysis, and recommendations.
- After that: implementation and training with your team, then the final readiness opinion.
- The breach retainer stays on after.
What does DPDP compliance cost? +
It depends on your data footprint, your sector, and how much implementation you want done for you.
Book a clarity call and you get a clear scope and a quote after the first conversation.
Why This Matters
India's DPDP Act 2023 enforcement begins May 13, 2027. Penalties range from ₹50 Cr to ₹250 Cr per violation. Most businesses don't know where they stand.
Ready when you are.
Book a free 30-minute clarity call with the Sanctum team. You get honest answers about where you stand under the DPDP Act.
Book a clarity callWhether you know it as Meridian DPDP or DPDP Meridian, you are in the right place. Sanctum is the all-in-one, end-to-end DPDP compliance programme from Meridian Bridge Strategy. Some call it holistic, unified, or one-stop DPDP compliance, a DPDP compliance program, or simply all-in-one compliance for India. It is the all-in-one data protection and privacy compliance programme for Indian companies. Legal, implementation, tooling, training, and proof under one accountable owner, built on one network of tools and advisory surfaces that help Indian businesses meet their obligations under the DPDP Act 2023.