What an engagement covers
Engagements are fixed-fee and scoped to you.
Three packages, set out below. Scope is agreed with you before any work starts, and the fee is fixed against it — no hourly billing.
We don't hand you a report and walk away. We map what applies, implement it, test it, and verify it — then give you a clear roadmap for what comes next.
Not sure what applies to you yet? Get your regulatory profile free — no engagement required.
India regulatory
CERT-In Directions 2022 and the DPDP Act 2023, implemented end to end.
Starter
We map what applies. We implement it.
Fixed-fee — scoped to you
- ✓Everything in your free regulatory profile — implemented
- ✓CERT-In Directions 2022 — implemented
- ✓DPDP Act 2023 — implemented end to end
- ✓Data inventory built, privacy notice written
- ✓Consent flows reviewed and set up
- ✓Grievance mechanism in place
Most popular
Standard
Security and compliance. Fully implemented.
Fixed-fee — scoped to you
- ✓Everything in Starter
- ✓Application & infrastructure security tested
- ✓Security gaps found, fixed, and verified
- ✓WhatsApp Business security & TRAI TCCCPR compliance
- ✓Security monitoring and log retention implemented
- ✓5 core security policies written and adopted
- ✓Roadmap for ISO 27001, SOC 2, PCI DSS — when triggered
Complete
Implemented, monitored, and maintained.
Fixed-fee — scoped to you
- ✓Everything in Standard
- ✓Trigger roadmap — ISO 27001 / SOC 2 / PCI DSS, mapped to the events that would require them
- ✓Quarterly compliance retainer
- ✓Regulatory changes tracked and applied
- ✓Incident response — supported, not just documented
- ✓Ongoing engagement as your business scales