What makes us India’s most comprehensive DPDP-compliant document collection: every feature below makes one collection compliant without you having to think about it, and leaves a record that proves it.
Pick a purpose, list the documents and details you need, set how long you will keep them. The notice is written for you from the purpose and the items, and you see the exact page your client will open, as you type. Nothing to draft, nothing to remember.
1.2
Seed templates
Start from a request that already fits the job: KYC, client onboarding, employee onboarding, patient registration. Purpose and notice come pre-written; edit what differs and send.
1.3
Documents and details in one request
Ask for files (a PAN card, a bank statement) and typed answers (an address, a policy number) in the same request. Each one is an item with its own status.
1.4
The capture page
Your client opens the link on their phone. No account, no app to install. They read the notice, tick consent, upload, or fetch a document straight from DigiLocker. If a file was wrong they replace it while the link is open. Nothing is stored until they have consented.
1.5
Send it your way
Copy the link, or open it pre-written in your own WhatsApp with one tap. Or let the system email it. The message carries your firm’s name, the request and the expiry date.
1.6
Reminders that run themselves
Timed to the link’s window, with nothing to set. When we emailed the link, we remind your client; when you sent it yourself, we nudge you to re-send. A nudge from you is one tap from the request page. Links stay valid for 7, 14 or 30 days; you choose.
Document requests
New request
All requests
Start from a templateOne secure link per client
Press 1–3 to switch
Collect documentsPeople upload what you ask for. Consent, notice and the files live here.Record consent onlyYou hold the documents yourself. This records the notice and the consent.
Start from1Blank2Client onboarding documents3Client KYC · example
PAN CardDocumentAadhaar (masked)DocumentAddress proofDocumentFull legal nameAnswerYour documents are kept for as long as they're a client, then deleted. This link stays open for 14 days.
Ready to send1 person gets their own link; the notice is frozen the moment you create.Press ⌘ ↵ to create
Document requests
New request
All requests
Start from a templateOne secure link per client
Press 1–3 to switch
Collect documentsPeople upload what you ask for. Consent, notice and the files live here.Record consent onlyYou hold the documents yourself. This records the notice and the consent.
Start from1Blank2Client onboarding documents3Client KYC · example
PAN CardDocumentAadhaar (masked)DocumentAddress proofDocumentFull legal nameAnswerYour documents are kept for as long as they're a client, then deleted. This link stays open for 14 days.
Ready to send1 person gets their own link; the notice is frozen the moment you create.Press ⌘ ↵ to create
Document requests
New request
All requests
Start from a templateOne secure link per client
Press 1–3 to switch
Collect documentsPeople upload what you ask for. Consent, notice and the files live here.Record consent onlyYou hold the documents yourself. This records the notice and the consent.
Add a personEach person gets their own link. ↵ on a complete row adds the next.
02Client onboarding documentsfor New client onboardingChange⏎034 items3 uploads · 1 written answer · all requiredChange⏎04Kept as long as they're a clientlink open 14 days · then deletedChange⏎
PAN CardDocumentAadhaar (masked)DocumentAddress proofDocumentFull legal nameAnswerYour documents are kept for as long as they're a client, then deleted. This link stays open for 14 days.
Ready to send1 person gets their own link; the notice is frozen the moment you create.Press ⌘ ↵ to create
app.confidentialdispatch.com/c/7kq2m4
S
Request fromSharma Associates
1Consent
2Items
3Send
Client onboarding documents
For new client onboarding. Four things are needed, and nothing you send here can be read back from this page.
This link was sent to +91 ••••• ••623
Items requested4 items
Respond by6 Oct 2026
Documents to upload3 items
Fetch from DigiLockerPAN Card can come straight from your DigiLocker
1
PAN CardPhoto or PDF · up to 50 MB
Add
2
Aadhaar (masked)Photo or PDF · up to 50 MB
Add
3
Address proofPhoto or PDF · up to 50 MB
Add
Details to type1 item
4Full legal name
Type your answer
Send itemsAdd at least one item to send
Privacy noticeWhat you are agreeing to
CollectingPAN Card, Aadhaar (masked), Address proof, Full legal name
PurposeNew client onboarding
RetentionAs long as you remain a client of Sharma Associates
Your rightsAccess · correction · erasure · withdraw consent anytime · nominate someone to act for you
Composed from the purpose and the items; frozen the moment the request is created.
PURPOSE7c1e
A request cannot be created without a purpose.
PREVIEWe04b
Renders from the same inputs as the page your client opens.
CONSENT91d2
Recorded before any file is accepted.
02 · CONSENT AND NOTICE2.1 OF 6
Told first. Agreed to exactly this.
2.1
A notice written for you, every time
Itemised: what is collected, why, for how long, the client’s rights, whom to contact. Generated from the purpose and the items; you never write it. Versioned, never edited in place. A client’s consent always points at the exact version they saw.
2.2
Consent that can be demonstrated
Recorded against that notice version, timestamped, tied to the link it came through. Free, specific, informed and affirmative, as the Act requires. Not a checkbox on a form; a record.
2.3
A receipt to your client
When they finish, they get a receipt of exactly what they agreed to: the items, the purpose, the retention date, your firm’s name. Shown once, printable, and they can have it emailed to themselves.
2.4
Withdrawal as easy as giving
The receipt carries a link the client keeps. Opening it shows who holds what, under which request, until when, and one button to withdraw. Withdrawal deletes the data and goes on the record; you are notified. No call to your office, no form.
2.5
Consent renewal
When a retention period is ending and the work is not, extend it properly: a renewal request with a fresh notice, the client agrees or declines on their phone, a fresh consent is recorded. Decline, and the data deletes on the original date.
2.6
Record consent only
For data you already hold, or collect yourselves in person: a request with declared items and no uploads. The client reads the notice and agrees or declines; the retention date is yours to honour, with a confirm-deleted step at the end.
Published noticeClient onboarding documents
Sharma AssociatesNotice on the collection of your personal data by Sharma AssociatesThe following personal data is being requested from you:
PAN CardDOCUMENTAadhaar (masked)DOCUMENTAddress proofDOCUMENTFull legal nameANSWER
Why we are collecting itNew client onboarding — Your data will be used only for this purpose and no other.How long we will keep itThis data will be kept for as long as you remain a client of Sharma Associates, and deleted when that relationship ends.Your rightsYou may access a summary of the personal data we hold about you. · You may request correction, completion, or updating of your data. · You may request erasure of your data. · You may withdraw your consent at any time. Withdrawing is as easy as giving consent, and processing based on your earlier consent remains lawful until withdrawal. · You may nominate another individual to exercise these rights on your behalf in case of death or incapacity.Grievance contactFor any question or grievance about your personal data, contact Priya Sharma at [email protected]. You will receive a response within the timelines prescribed under law.ComplaintsIf your grievance is not resolved, you have the right to complain to the Data Protection Board of India.
Your consentBy ticking the consent box and submitting, you give your free, specific, informed and unambiguous consent to the collection and use of the data listed above, for the stated purpose only.Agree and continue
Composed and frozen when the request was created on 22 Sep 2026. Every person's link opens this, word for word — it cannot be edited afterwards.
What's been happening
Activity
Export the audit trail
NotificationsActivityAudit trail · admin
From22/09/2026To22/09/2026Clear
Every event on record, views and sign-ins included. Admins only, and each entry is hash-chained so it cannot be edited or deleted.
15:46Rights link issued · Rajesh Kumar · KYC documents#2203 · by system—
15:46All documents received · Rajesh Kumar · KYC documents#2202 · by the personlink
15:43Consent recorded · Rajesh Kumar · KYC documents#2201 · by the personlink
15:41Link opened by the person · Rajesh Kumar · KYC documents#2200 · by the personlink
15:32Link sent on WhatsApp · Rajesh Kumar · KYC documents#2199 · by youapp
11:18Rights link issued · Fatima Shaikh · KYC documents#2198 · by system—
11:18All documents received · Fatima Shaikh · KYC documents#2197 · by the personlink
11:12Consent recorded · Fatima Shaikh · KYC documents#2196 · by the personlink
app.confidentialdispatch.com/c/7kq2m4
S
Request fromSharma Associates
Consent
Items
Send
Client onboarding documents
For new client onboarding. Four things are needed, and nothing you send here can be read back from this page.
This link was sent to +91 ••••• ••623
Items sent4 of 4
Sent at22 Sep, 3:43 pm
Sent. Sharma Associates has all four items.
Take your copy nowThis receipt and your rights link are shown once. When you close this page they will not come back: print, email or copy them before you leave. If you lose the link, contact Sharma Associates directly for anything about your data.
Print or save as PDF
Or email a copy to yourself
Your email addressEmail me a copy
Your rights linkhttps://app.confidentialdispatch.com/w/m8q2vk7r4t
Copy link
Consent receiptYour copy of what you agreed to
Given byRajesh Kumar
Given toSharma Associates
For requestClient onboarding documents
Given at22 Sep 2026, 3:43 pm IST
Notice version1
Items sent4 of 4
What you sentPAN Card · Aadhaar (masked) · Address proof · Full legal name
Notice fingerprint · SHA-256Version 1
3f9a 1c27 8e4b 0d65 a2f8 7c19 4be0 93d1 6a5f 2e8c 0b74 d93a 51ef 86c2 7a0d 4b19Sharma Associates holds the same fingerprint. Matching them confirms this is the exact notice you agreed to, unaltered.
The full notice you agreed toIncluded in the printed copyShow
Your rightsYou can withdraw this consent at any time, and ask for a copy of what is held, a correction or deletion, using your rights link. You can also contact Sharma Associates’ grievance contact for any of these.
Grievance contactPriya Sharma · [email protected]If your grievance is not resolved, you may complain to the Data Protection Board of India.
app.confidentialdispatch.com/w/m8q2vk
S
Consent given toSharma Associates
Your consent for “Client onboarding documents”.
What this consent coversYour consent, as recorded
Given byRajesh Kumar
Given toSharma Associates
For requestClient onboarding documents
Given at22 Sep 2026, 3:43 pm IST
Keptwhile you are a client
Items covered4
What it coversPAN Card · Aadhaar (masked) · Address proof · Full legal name
Your rightsWithdraw, or ask Sharma Associates for a copy, a correction or deletion
Under the Digital Personal Data Protection Act, you can withdraw this consent at any time, and you can ask Sharma Associates for a copy of what it holds about you, to correct it, or to delete it. Withdrawing acts at once. A request for a copy, a correction or deletion is answered by Sharma Associates within 90 days. Its answer appears on this link, so keep the link safe. No email or SMS is sent.
Withdraw this consent
Tells Sharma Associates to stop using what you shared. What you sent is permanently deleted at once; only the record that you gave and withdrew consent is kept, as proof.Withdraw this consent
A copy of what you sentAsked on 25 Sep 2026
Sharma Associates has until 24 Dec 2026 to answer. Come back to this link to see the outcome. All progress is updated here. No email or SMS is sent.
A correction
Tell Sharma Associates what is wrong and what it should be. Sharma Associates corrects its records and lets you know here.Ask for a correction
Deletion
Sharma Associates deletes what you sent under this consent, unless a law requires it to keep some records. If it keeps anything, it says here which law requires that.Ask for deletion
Your rightsYou can withdraw this consent at any time, and ask for a copy of what is held, a correction or deletion, on this page. You can also contact Sharma Associates’ grievance contact for any of these.
Grievance contactPriya Sharma · [email protected]If your grievance is not resolved, you may complain to the Data Protection Board of India.
app.confidentialdispatch.com/c/r4n8w2
S
Renewal request fromSharma Associates
1Choose
2Consent
3Done
KYC documents
Sharma Associates asks to keep what you shared for client onboarding and statutory KYC until 22 Oct 2027. Choose item by item; anything you leave out deletes on the date already promised. Nothing new is collected here, and what you shared earlier cannot be read back from this page.
This link was sent to +91 ••••• ••623
On file1 item
Answer by20 Oct 2026
What you shared earlier1 of 1 to keep
Aadhaar card (masked)Document
Kept until 22 Oct 2027
Agree to keep this itemTicked items stay with Sharma Associates until 22 Oct 2027, then they are deleted. Anything unticked deletes on the date already promised. After agreeing you get a one-time consent receipt — save it before you close the page.
One answer closes this link; unanswered, it lapses on 20 Oct 2026 and nothing is kept.1 of 1 kept
Privacy noticeWhat you are agreeing to
CollectingAadhaar card (masked)
PurposeClient onboarding and statutory KYC
RetentionIf you agree, the data you select will be kept until 22 Oct 2027 and then deleted. Anything you do not select is deleted on the date originally promised.
Your rightsAccess · correction · erasure · withdraw consent anytime · nominate someone to act for you
ComplaintsData Protection Board of India, if unresolved
Read the full notice
app.confidentialdispatch.com/c/h3t6p9
S
Consent request fromSharma Associates
1Read
2Consent
3Done
Income tax return records
Sharma Associates holds documents of yours for income tax return filing and asks for your consent to keep them. Nothing is uploaded here: read the notice and answer.
This link was sent to +91 ••••• ••623
Documents3 items
Answer by22 Oct 2026
What they hold3 documents
1
PAN CardHeld by Sharma Associates
In Sharma Associates's own records
2
Form 16 (FY 2025–26)Held by Sharma Associates
In Sharma Associates's own records
3
Bank statement, last 6 monthsHeld by Sharma Associates
In Sharma Associates's own records
AgreeSharma Associates keeps these documents in its own records for up to 1 year from today, then deletes them and confirms the deletion. After agreeing you get a one-time consent receipt — save it before you close the page.
One answer closes this link; unanswered, it lapses on 22 Oct 2026 and no consent is recorded.I do not agree
Privacy noticeWhat you are agreeing to
CollectingConsent for storing PAN Card, Form 16 (FY 2025–26), Bank statement, last 6 months
PurposeIncome tax return filing
RetentionThis data will be kept for up to 365 days from the date of your consent, and then deleted. These records are kept by Sharma Associates in its own systems, not on Confidential Dispatch. Sharma Associates is responsible for deleting them when the period ends or you withdraw, and confirms the deletion.
Your rightsAccess · correction · erasure · withdraw consent anytime · nominate someone to act for you
ComplaintsData Protection Board of India, if unresolved
Read the full notice
Common questions
Where are my documents?ReadWhat happens if I decline?ReadCan I change my mind later?Read
UNDER 02HOW IT’S TRUE
VERSIONS5fa8
Notice versions are immutable. A consent record references exactly one version.
ERASUREc37e
The consent record survives erasure of the data it covers.
WITHDRAW2b61
The withdraw link is minted per consent, when the request is fulfilled.
RECORDd9a0
Every consent, withdrawal, renewal and decline is on the record.
03 · KEEP AND DELETE3.1 OF 4
Kept as long as promised. Then gone, on its own.
3.1
A retention rule on every request
Set at the start, stated in the notice: keep for a fixed period, or for the length of the relationship, which you end per client when the work ends. Periods are capped at ten years.
3.2
A statutory stage, when the law requires one
Where a regulation makes you keep records after the purpose ends (KYC, tax, audit), add a second stage with its basis and mandatory period. It starts when the first stage ends, however it ends. The data deletes only when no statutory hold covers it.
3.3
Deletion that happens on its own
A daily run deletes what is due. Fifteen days before, you are asked once: keep with a stated basis and a review date, renew with the client, or delete now. Do nothing, and it deletes on the date. Deletion destroys the key, so backups go too.
3.4
The retention queue
One screen of what is due and when, what was kept and why, and what was deleted. Nothing to track in a spreadsheet.
Document requests
New request
All requests
Start from a templateOne secure link per client
Press 1–2 to switch
Collect documentsPeople upload what you ask for. Consent, notice and the files live here.Record consent onlyYou hold the documents yourself. This records the notice and the consent.
Add a personEach person gets their own link. ↵ on a complete row adds the next.
02
What to call it
2–5 words each
TitleKYC documents
PurposeClient onboarding and statutory KYCThis sentence appears in the client's notice exactly as written.
03
What you need
1 item
Aadhaar card (masked)DocumentRequired
Add a document or question↵ on a name adds the next · collect only what the purpose needs.
04
Terms
Both appear in the notice
Keep the documents for1 year2 years5 yearsAs long as they're a clientOther
We must keep them beyond this period under law
The link stays open for7 days14 days30 days
Save as a templateThe request and its items, not the peopleCreate request⌘ ↵
Each person's link is issued the moment you create this. A request can't be edited afterwards, but people can be added any time.
What the client sees
Live
Sharma AssociatesKYC documentsClient onboarding and statutory KYC
Aadhaar card (masked)DocumentYour documents are kept for 1 year, then deleted. This link stays open for 14 days.
Ready to send1 person gets their own link; the notice is frozen the moment you create.Press ⌘ ↵ to create
Document requests
New request
All requests
Start from a templateOne secure link per client
Press 1–2 to switch
Collect documentsPeople upload what you ask for. Consent, notice and the files live here.Record consent onlyYou hold the documents yourself. This records the notice and the consent.
26AUGPriya Nair · KYC documentsdeleted on schedule 26 Aug 2026 · promised until 26 Aug 2026deleted on schedule
18AUGFatima Shaikh · Loan application documentsdeclined by them · deleted on schedule 18 Aug 2026deleted on schedule
2AUGPriya Nair · Loan application documentsdeleted 2 Aug 2026deleted
Anything left undecided is deleted exactly on the promised date, and the deletion is logged on the trail.
UNDER 03HOW IT’S TRUE
DAILY48ce
The retention worker runs every day, even if nobody logs in.
LAPSEf17b
A prompt that gets no answer lapses into deletion.
KEYS6e35
Deletion is by key destruction, which covers backups.
RECORD0b1d
The deletion is written to the record the data leaves behind.
04 · RIGHTS4.1 OF 3
Every right, one link away.
4.1
One link for every right
The link on the client’s receipt is their rights page: withdraw consent now, or ask for a copy, a correction or deletion. They see the state of each ask on that page.
4.2
Ninety days on the clock
A new ask appears on your Rights page with the statutory clock running. Send the copy, make the correction, delete, or, where a law requires you to keep the data, keep it under that law with its basis stated. Every answer and its basis go on the record.
4.3
Everything held on one person, in one place
Open a client and see every request, every document and typed answer, every consent and its version, every date. Export it all as one file. Correct a detail. Erase the person, with the proof of erasure kept.
app.confidentialdispatch.com/w/m8q2vk
S
Consent given toSharma Associates
Your consent for “Client onboarding documents”.
What this consent coversYour consent, as recorded
Given byRajesh Kumar
Given toSharma Associates
For requestClient onboarding documents
Given at22 Sep 2026, 3:43 pm IST
Keptwhile you are a client
Items covered4
What it coversPAN Card · Aadhaar (masked) · Address proof · Full legal name
Your rightsWithdraw, or ask Sharma Associates for a copy, a correction or deletion
Under the Digital Personal Data Protection Act, you can withdraw this consent at any time, and you can ask Sharma Associates for a copy of what it holds about you, to correct it, or to delete it. Withdrawing acts at once. A request for a copy, a correction or deletion is answered by Sharma Associates within 90 days. Its answer appears on this link, so keep the link safe. No email or SMS is sent.
Withdraw this consent
Tells Sharma Associates to stop using what you shared. What you sent is permanently deleted at once; only the record that you gave and withdrew consent is kept, as proof.Withdraw this consent
A copy of what you sentAsked on 25 Sep 2026
Sharma Associates has until 24 Dec 2026 to answer. Come back to this link to see the outcome. All progress is updated here. No email or SMS is sent.
A correction
Tell Sharma Associates what is wrong and what it should be. Sharma Associates corrects its records and lets you know here.Ask for a correction
Deletion
Sharma Associates deletes what you sent under this consent, unless a law requires it to keep some records. If it keeps anything, it says here which law requires that.Ask for deletion
Your rightsYou can withdraw this consent at any time, and ask for a copy of what is held, a correction or deletion, on this page. You can also contact Sharma Associates’ grievance contact for any of these.
Grievance contactPriya Sharma · [email protected]If your grievance is not resolved, you may complain to the Data Protection Board of India.
Rights
Rights requests
Waiting on you
2requests from clients to answer
A client asks through their rights link; the law gives you 90 days to answer. What you record here is what they see on that link.
A copy — send it from their folder, then Mark done
A correction — correct it in their folder, then Mark done
Deletion — erase now, or keep or decline with a basis
OpenRegister
Open2 requests
Due within 7 days1
10SEPDeletion · Suresh Iyer · KYC documentsasked 12 Jun 2027 through their rights link · answer by 10 Sep 2027 · 3 items on filedue in 3 daysDeclineErase now
Later1
30NOVA correction · Priya Nair · KYC documentsasked 1 Sep 2027 through their rights link · answer by 30 Nov 2027due in 84 daysDeclineMark doneWhat they asked to changeMy address has changed to 7 Lake View Road, Kochi 682011.
Rule 14 of the Digital Personal Data Protection Rules gives a firm 90 days to answer a request. Nothing here closes on its own; an unanswered request stays open past its date.
Consented 23 September 2026 · held 1 year, until 23 September 2027Withdraw consent
This person's rights
Every action is written to the trail
Record a request from themA copy, a correction or deletion asked for by phone, mail or in personExport their dataEverything held, as a zipCorrect their detailsName, email, phoneRelationship endedNothing is kept on that basis yetErase this person2 files, 1 answer, 1 consent
UNDER 04HOW IT’S TRUE
ANSWERED3c7a
An ask is answered in the app, chained with its outcome and its basis.
EXPORT8e21
A person’s export holds everything on that person and nothing on anyone else, with a hash.
ERASEDa0f4
Erased stays erased in every later export.
05 · PROOF · NO SHEET
Every claim above rests on this. The record, in full.
One request, from the moment it was built to the night its files were destroyed. Click any entry and change it.
Every compliance-relevant action is written to an append-only record, each entry chained to the one before. Change one and the chain breaks. Nobody at Confidential Dispatch can edit it either.
The files are gone. These lines are not. The record stores the fact of a consent or a deletion, never the personal data itself, so the proof survives the erasure.
05.5
Demonstrate, not assert.
A verification procedure exists, and a deliberate tamper fails it. When a regulator, a client or a counterparty asks, you show them the record for that request.
VERIFIED · 10 ENTRIES · 3 ANCHORS · CHAIN INTACTCLICK ANY ENTRY TO CHANGE IT
06 · SECURITY, AND YOUR DATA STAYS YOURS6.1 OF 5
Compliance is what you are buying. Security is what makes it credible.
6.1
Stored in India
Personal data is stored at rest in Mumbai: documents, database, keys, backups. Hosted on AWS in Mumbai; AWS’s infrastructure is SOC 2 and ISO 27001 certified.
6.2
Encrypted, with a key per firm and a key per document
In transit and at rest. Deletion destroys the document’s key, so a deleted file cannot be recovered from a backup or an old version.
6.3
Only your firm can see your documents
Confidential Dispatch has no direct access to your documents and no panel that shows them to us.
6.4
Access you control
Roles for your team, two-factor sign-in, and every view and download written to the record with who and when.
6.5
Your data leaves with you
Every firm, free or paid, current or leaving, can take a complete, self-verifying export: documents, consent records, notice versions as served, retention decisions, rights answers, and the chain entries that let you verify all of it without us.
03RolesWhat each person at your firm can do. Admins hold everything; the other roles are yours to shape.Add a role
Admin (your role)1 personEverything, fixed
Accountant1 personChange
Member1 person · 1 invitedClose
NameMember
What this role can doSee requests, clients and documentsCreate and send requestsSave and edit templatesExport one person’s dataCorrect a person’s details
Answer rights requestsSee the retention queueDecide retention cases and renewalsWithdraw consent, end a relationship, erase a personSee the audit trailRecord and handle breach incidentsPlan & billingA role also receives the emails and notifications for what it can do.Only admins can change firm settings, manage the team, and download the clients list, the audit trail or the full export.
SaveCancel1 person holds this role, move them first
Data belongs to the firm, not the person — a disabled person loses access immediately, and everything they did stays on the record.
Firm settings
Settings
The firm clients seeSharma Associates[email protected] · this name and logo appear on every request
Grievance contactSet
LogoNone yet
Two-factorOn for you
01
Contact & display
The name clients see on requests, and the grievance contact every notice must carry — requests can't be created without it.
Appears on every request, its emails and the client's upload page.
Nothing to saveDiscardSave changes
02
Firm logo
Shown on the pages your clients open: the upload page and their rights page. It tells them the request is genuinely from you.
Firm logoNo logo yetPNG, JPG or WebP, up to 1 MBUpload
03
Consent renewals
What we do 15 days before a person's data reaches the end of its period. Whichever you choose, the queue shows every renewal and you can still keep or delete instead.
Nothing automaticYou start each renewal yourself, from the retention queue or the person's folder.
Prepare the renewal for you to send15 days before the date, we create the renewal and put the person's link in your retention queue. You send it: copy, WhatsApp or email.
Prepare it and email the personWe create the renewal and email the link ourselves when we have the person's email address, then remind them until they answer. Nobody without an email address is contacted: their link waits in your queue for you to send.
04
Two-factor authentication
OnProtects your own sign-in with a second step. Uses a code from an authenticator app alongside your password.
Authenticator appGoogle Authenticator, 1Password, Authy or similar.
Turn off two-factorYou will sign in with just your password from then on. Lost your device? Ask a firm admin to reset it from Team.Turn off
05
Export your data
2 of 3 downloads left · until 29 SepEverything you hold with us, for your own records or to take with you: your clients' documents, every consent and the notice each person saw, retention and rights records, breach incidents, and the proof chain. The export verifies on its own; it needs nothing from us.
One full document export every 7 days. If you want to see the evidence alone, download it on its own. It is smaller and carries no download limit.
Evidence onlyA few MB. No download limit.Download
All documents62 documents · 148 MB · 2 of 3 leftDocuments & EvidenceDocuments only
THE DOCUMENT · ENCRYPTED, OPENED ONLY BY YOUR FIRM
UNDER 06HOW IT’S TRUE
RESIDENCYc2d9
Documents, database, keys and backups are held at rest in Mumbai.
KEYS17be
A key per firm and a key per document; deletion destroys the document’s key.
ACCESS5a03
Every firm-side view and download is on the record.
EXPORTe6f8
The export carries the chain entries that verify it, without us.
07 · RUN THE FIRM7.1 OF 6
The housekeeping, handled.
7.1
Your team, with roles
Invite staff; work belongs to the firm, not the person who did it. Admins control invites, settings and deletion; members do the work. Every action is attributed.
7.2
Home and the request list
What is outstanding, what arrived today, what needs a decision. Outstanding first.
7.3
Notifications, without noise
A bell in the app for every record; one digest email per person per day; an instant email only when your hand is needed.
7.4
A breach register, ready before you need it
If personal data is ever exposed, record the incident in one go: the questions the Rules ask, answered once. The two letters the Rules require are written for you to copy and send. The Board’s deadline is shown. The record is frozen and chained.
7.5
Download all clients
One file of everyone your firm holds consent for, every field, for your own use.
7.6
Support from inside the app
Something isn’t working, a question, a suggestion: one box, a reference number, a reply by email.
Tuesday 22 September
Good afternoon
Search clients and requestsNew request
Retention: 3 cases coming up — data deletes on the promised date unless you renew, keep or delete it first.Decide
Ready for you
2complete sets of documents waiting to be processed
Breach registerEight questions, once. Anything you do not know yet can be marked so; the next page gives you the two letters to send and records when you sent them.
01
Record the breach
The incidentYour answers below become two letters: one to the people affected, one to the Data Protection Board. You copy each and send it yourself; nothing is sent by Confidential Dispatch.
A short name for itFor your register only; it is not sent to anyoneOffice laptop stolen, 22 SeptemberWhen you became aware of itThe Board’s 72-hour clock starts here22/09/2026, 18:30
Who was affected
All clientsEveryone whose personal data you hold. The safe answer when you cannot tell exactly whose data was touched.
Some of themYou know how many; give the number and a line on which ones.
How many people14Which ones, in a lineThe clients whose KYC documents were downloaded to the laptop in September
The list of people to write to comes from Clients: download all clients as a CSV there and work from it.
What happened, in your wordsRule 7 of the Digital Personal Data Protection Rules, 2025 lists what both letters must say. Answers 1 to 5 go to the people and to the Board; 6 to 8 go to the Board only, and can be marked not known yet. Every question needs an answer or the tick.
1. What happenedThe nature and extent of the breach, when it happened and whereA laptop holding downloaded copies of 14 clients’ KYC documents was stolen from our office on the evening of 22 September.
2. What this could mean for themThe consequences the breach is likely to have for the personSomeone could try to use your Aadhaar or PAN details to open an account or take a loan in your name.
3. What you are doing about itThe measures you have taken or are taking to reduce the riskThe laptop’s disk is encrypted and its account has been locked. We have filed a police complaint.
4. What they can doThe steps the person can take to protect themselvesLock your Aadhaar biometrics on the UIDAI site and watch your bank and credit reports for anything you do not recognise.
5. Who they can contactA name, phone number or email address for questions; your grievance contact is used if this is left blankPriya Sharma, [email protected]
6. How it happenedThe facts and circumstances and, where known, who caused it (Board only)The laptop was taken from a locked cabin after office hours; the building’s CCTV is with the police.
7. What you foundNot known yetWhat your own look into it found (Board only)The letter to the Board will say: “Under investigation; we will update the Board as soon as this is known.” Come back and fill this in when you know; then record the update as sent.
8. What changes so it does not happen againNot known yetThe remedial measures against a recurrence (Board only)The letter to the Board will say: “Under investigation; we will update the Board as soon as this is known.” Come back and fill this in when you know; then record the update as sent.
Record the breachUnsaved changes
02Send the lettersComes next: the two letters, ready to copy, and a button to record each as sent.
Tuesday 22 September
Good afternoon
Search clients and requestsNew request
Retention: 3 cases coming up — data deletes on the promised date unless you renew, keep or delete it first.Decide
Ready for you
2complete sets of documents waiting to be processed
