Every rights request, on the statutory clock.
One portal for all five request types under the DPDP Act, with OTP identity checks, a 90-day SLA engine and an auto-generated closure PDF for every request you resolve.
privacy.acme-retail.in
What would you like to do?
- Access my data
- Correct my data
- Erase my data
- Nominate someone
- Raise a grievance
Every right in the Act, in one place.
Data principals pick what they want to do. Your team gets a verified, tracked request with the clock already running.
Access
A summary of the personal data you process and the processing done with it.
Correction
Fix data that is inaccurate or misleading, or complete what is missing.
Erasure
Erase data that is no longer needed for the purpose it was collected for.
Grievance
A readily available way to raise a complaint and get it answered.
Nomination
Name someone to exercise these rights in the event of death or incapacity.
OTP verification
Every request is identity-checked with a one-time password before anything is shared.
Verified before anything is shared.
Each request starts with an OTP check, so you only ever act for the person whose data it is. Then the request lands in your queue with the clock already running.
- OTP identity verification on every request
- Starter: 25 requests a month · Growth and above: unlimited
Ninety days, and you'll know well before day 75.
Every open request counts towards the 90-day limit under Rule 14(3). Escalation alerts fire before deadlines slip, so nothing waits until the last week.
- 90-day SLA engine per Rule 14(3)
- Escalation alerts before the deadline
Open requests
SLA · Rule 14(3) · 90 days
- RR-2041 · Accessday 4 / 90
- RR-2037 · Erasureday 31 / 90
- RR-2029 · Grievanceday 68 / 90
- RR-2018 · Correctionday 12 / 90
The orange line marks the escalation alert at day 75
A closure PDF for every request.
When a request is resolved, ConsentArc generates a closure report automatically and seals the record to your write-once proof vault.
- Auto-generated closure PDF
- Sealed with a SHA-256 hash
Closure report
RR-2041 · access request · closed day 12
- Request verified by OTP
- Data summary prepared
- Response sent to data principal
- Record sealed to the vault
Mapped to the clauses that apply.
Every workflow in this module traces back to a specific obligation, so you can show an auditor why each step exists.
- DPDP Act S11The right to access information about personal data and how it is processed.
- DPDP Act S12The right to correction, completion, updating and erasure of personal data.
- DPDP Act S13The right to a readily available means of grievance redressal.
- DPDP Act S14The right to nominate another person to exercise these rights.
- DPDP Rules, Rule 14(3)Requests and grievances must be answered within a period not exceeding 90 days.
Ready to move forward?
Confirm your tier and we'll provision your tenant and walk you through setup.
hello@consentarc.com+91-9532453200Data stored in India