PrahiX

PrahiX Data Protection

Personal data discovered. Leakage stopped. Compliance proven.

One console for the whole DPDP lifecycle, ready before May 2027.

Know where personal data lives.

Endpoints, file shares, sent mail and databases, scanned for 14 Indian identifiers and risk-scored 0–100.

Know where it goes.

Every movement of personal data across 12 channels, watched from one console.

Stop leakage before it leaves.

Allow, warn, ask the DPO or block, on browser uploads, email, USB, print, sync folders and more.

Meet every statutory clock.

Rights requests, erasure with proof, and live breach clocks for CERT-In, the Board, RBI, SEBI and IRDAI.

Compliance, proven.

62 DPDP controls on one scorecard, with sealed evidence packs for your auditor or the Board.

Most DPDP obligations apply from May 2027.

The Digital Personal Data Protection Act 2023 and the DPDP Rules 2025 turn privacy into an operational duty for every Data Fiduciary.

--Days
--Hours
--Minutes
--Seconds
Up to ₹250 crorefor failing to take reasonable security safeguards
Up to ₹200 crorefor failing to notify a breach
Penalties under the DPDP Act 2023.
14Indian identifier types, check-digit validated
12data movement channels watched
62DPDP controls on one scorecard
22Eighth Schedule notice languages

Everything PrahiX Data Protection does for you.

One console for the whole DPDP lifecycle. Keep scrolling to meet each part.

Personal data discovery.

Every file on company machines that holds personal data: where it is, how many people it concerns, and a 0–100 risk score.

14 Indian identifiers, validated.

Aadhaar, PAN, GSTIN, cards, UPI IDs, bank accounts, passports and more, check-digit validated. OCR reads ID photos and scans.

File shares, mail and databases.

Scheduled scans of file shares, Microsoft 365 and Gmail sent mail, and databases down to column level.

Leakage stopped on 12 channels.

Uploads, email, USB, print, clipboard, sync folders and more. Monitor mode shows what would be blocked before you enforce.

Policies with guardrails.

Allow, warn, ask the DPO or block. Test against past events, ship as a signed bundle, and time-box every exception.

Consent, on record.

A tamper-evident ledger per purpose, notices in 22 Eighth Schedule languages, and a Consent API for your website, apps and CRM.

Rights requests, on time.

Access, correction, erasure, grievance and nomination, with due dates, identity checks and response letters.

Erasure, with proof.

Files deleted from a signed list, with proof that each one is gone. Retention floors and legal holds are enforced.

Every breach clock, live.

CERT-In, Board, RBI, SEBI and IRDAI clocks start from the recorded awareness time, with each report drafted for your officer.

Compliance you can prove.

62 DPDP controls on one scorecard, with sealed SHA-256 evidence packs for your auditor or the Board.

Three logs see three events. PrahiX Data Protection sees a leak.

11:40 on a Tuesday: customer records with Aadhaar and PAN numbers are exported, saved to a laptop and uploaded to a personal drive. Watch it play out both ways.

Customer data
DatabaseAudit log · DBA
11:40:03Bulk export of customer records · CRM
WebProxy · Network team
11:42:12Upload to a personal cloud drive · mkt-lt-22
LaptopEndpoint agent · IT
11:40:20Export file saved · mkt-lt-2211:40:41File zipped · customers.zip
PrahiX Data Protection · one timeline for personal data
INC-3107 · P31 signal

What each team sees

Database audit logDBA · weekly review
No new alerts
Web proxyNetwork team
No new alerts
Endpoint agentIT helpdesk
No new alerts

What PrahiX Data Protection sees

·INC-3107 · Customer data0 signals

Watching personal data. All quiet.

    RAYA
    • Waiting for enough context to act

    Illustrative scenario. Swipe the timeline to see all of it.

    Every regulator. Every clock.

    The moment an incident is recorded, every clock that applies to you starts ticking at once.

    6 hCERT-Infrom noticing the incident
    Without delayDP Boardinitial intimation
    72 hDP Boarddetailed report, from awareness
    Without delayPrincipalsnotices in English and Hindi
    6 hRBI / SEBIwhere the sector applies
    24 hIRDAIfor insurers

    The platform drafts each report with a required-field checklist. Your officer files it and records the submission, which stops that clock.

    Protecting personal data starts with our own product.

    It runs as the Data Guard module on the endpoint agent you already deploy. No second agent.

    Endpoint processingFile contents stay on the machine. Only counts, identifier kinds and up to 3 masked samples are sent.
    Three roles, three viewsThe DPO sees full detail, admins see masked data, analysts see pseudonyms with logged reveals.
    Audit before readEvery view, export or change is logged first. If the log is unavailable, nothing is shown.
    Tamper-evident recordsThe access log and consent ledger are hash-chained. Anyone can click Verify.
    Signed componentsModules, policy bundles and erasure lists are signed with offline Ed25519 keys.
    Data stored in IndiaHosted on the PrahiX platform. Findings and movement events are kept for one year.
    The RAYA AI orb

    RAYA keeps watch over personal data.

    PrahiX Data Protection knows where personal data lives and where it goes. RAYA surfaces what matters first and prepares the work for your DPO, within the limits you set, so you are ready before May 2027.

    Discover
    • Flags files out of place: Downloads, USB, Recycle Bin
    • Spots duplicates and copies untouched for a year
    Triage
    • Scores every alert 0–100, with the reasons
    • Routes it to an owner, on the right SLA
    Respond
    • Drafts response letters for rights requests
    • Drafts each breach report for your officer

    Have Questions? We've Got Answers.

    PrahiX Data Protection: one console for the whole DPDP lifecycle. It finds personal data, stops it leaking, and runs consent, rights requests, erasure, breach clocks and regulator reports. It runs on ORA, the PrahiX platform.

    No. It runs as the Data Guard module on the PrahiX endpoint agent (1.8.61 or later) and the on-site collector you already deploy.

    File contents never leave the machine. The console receives counts, identifier kinds and up to three masked samples, and every view of personal data is logged before it is shown.

    Windows, Linux and macOS endpoints; Chrome, Edge and other Chromium browsers; Outlook for Microsoft 365; and, through the on-site collector, file shares, Microsoft 365 and Gmail sent mail, and databases.

    No. It supports your compliance programme with facts and evidence. Decisions stay with your DPO and legal team.

    Do you know where your personal data is right now?

    See PrahiX Data Protection find it, guard it and prove it, on your own systems.