Digital Personal Data Protection Act 2023 — TruveriX's Compliance Framework
TruveriX is built from the ground up as a DPDPA-first platform. As a data fiduciary operating in India, we have designed our consent architecture, data flows, retention policies, and grievance mechanisms to be fully aligned with India's Digital Personal Data Protection Act 2023.
Every verification request is accompanied by a granular, purpose-specific consent notice presented to the data principal (individual being verified). Consent is digital, time-stamped, and auditable. Withdrawing consent is as simple as providing it — a single-step process available at any time.
All personal data processed by TruveriX is stored within India on AWS Mumbai (ap-south-1) infrastructure. No personal data is transferred outside India except where required by specific international verification workflows, in which case adequacy safeguards are applied.
TruveriX has appointed a Data Protection Officer (DPO) responsible for overseeing DPDPA compliance. Contact the DPO at: privacy@truverix.com
TruveriX is monitoring GOI notifications regarding Significant Data Fiduciary designations and is building the additional compliance framework (Data Protection Impact Assessments, annual audits, and appointment of an independent Data Auditor) required for SDF classification.