Skip to content
Skip to content
FOR HR AND RECRUITMENT

DPDP-compliant document collection. Built for how a hiring team works.

Your candidates’ PAN, Aadhaar, certificates and salary slips are personal data under the DPDP Act. Confidential Dispatch lets you collect them the way the Act requires, so every joiner’s documents arrive compliant and sit in one place, role by role.

Start free, no card required LIVE AT APP.CONFIDENTIALDISPATCH.COM · INDIA
02 · YOUR INTAKE TODAY

Multiple places. No single answer.

Kestrel Analytics Joining documents, Analyst Employment onboarding and payroll setup, Analyst
PAN Card Document Relieving letter Document Salary slip, last 3 months Document Aadhaar DocumentYour documents are kept for 5 years, then deleted. This link stays open for 14 days.
‹ AR Aditi Raoonline
Please send your PAN, Aadhaar, last three payslips and relieving letter10:02✓✓
PDFRelieving letter.pdf1 page · PDF
18:40
PDFPayslip Aug.pdf2 pages · PDF
18:40
↪ Forwarded
JPGPAN card.jpg1 page · JPG
18:43 COPY 2
Rest by tomorrow.18:44
Message
Search mail
Compose Inbox12 Starred Sent Drafts
Aditi Rao19:02Re: Re: Joining documents – attaching PAN…
N. Kapoor19:20Fwd: Fwd: Re: Joining documents – for payroll
S. Iyer19:31Fwd: Re: Joining documents – saved to drive
Aditi RaoMarmy interview round 2
Re: Re: Joining documents
RAditi Raoto me
Hi, attaching PAN and degree. Payslips sent on WhatsApp.
JPGPAN card.jpg
PDFDegree.pdf
ReplyForward
+ New My Drive › Clients › 2025 › Aditi Rao Shared with 4
Files
PDFOffer letter, signed.pdf
JPGAadhaar.jpg
PDFPayslip_Aug_final.pdf
COPY 2
PAN card copy.jpg
COPY 3
✕ 6 DPDP CHECKS FAILED
03 · BUILT IN

DPDP-compliant collection.

Everything the Act asks for at collection. None of it by hand.

PAN cardJPG
PAN CardDocument
Relieving letterPDF
Relieving letterDocument
Salary slip, last 3 monthsPDF
Salary slip, last 3 monthsDocument
AadhaarJPG
AadhaarDocument
HOW IT GOES TODAY

It starts with a message.

Joining week starts with a message: “please send your PAN, Aadhaar, last three payslips and relieving letter”. The documents arrive in twenty WhatsApp chats and as many email threads, get forwarded to payroll, saved to the recruiter’s laptop, and copied to the HR drive. The candidates who did not join, and the hundred who were never selected, sent documents too, and those are still there. Nobody told any of them why the documents were asked for, how long they would be kept, or that they could ask for them back. Nothing records that they agreed.

UNDER THE ACT

Every step is a gap.

Under the Act, each of those is a gap: no notice, no consent that can be demonstrated, no retention date, no record. A candidate’s documents end up in multiple places, and the ones who were rejected are the ones most likely to ask what you still hold.

AND THE PRESSURE TO KEEP

So you keep everything, everywhere.

The pressure is not only the Act. Candidates already ask why a recruiter needs their Aadhaar before an offer, and a fake-offer message with your company’s name on it is a known scam. So you collect everything, from everyone, and keep it. That is exactly what the Act no longer allows.

04 · ONE REQUEST, END TO END

One request, from your desk to their phone and back.

Every request goes out with what the Act asks for at collection: the notice, the consent, the declared purpose, the retention date, the proof record and the path for your client to exercise their rights. You do none of it by hand.

How it works, in full
05Afterwards, kept for 5 years

Or any period you choose. Then the documents delete on their own, on the date the notice promised, unless you say otherwise. Every step, from the notice to the deletion, stays on a record that cannot be quietly changed. And your client can ask for a copy, a correction or deletion from the link on their receipt, at any time.

05 · BUILT FOR HOW A HIRING TEAM WORKS

Built for how a hiring team works.

See every feature
01

Name documents by the role and the round

Every document in a request has a name you can edit. “Salary slip” becomes “Salary slip, last 3 months, Analyst offer” as you type it, so what the candidate uploads is already labelled for the file.

02

One folder per candidate, roles stacked

Every request you send a candidate sits in that candidate’s folder, newest on top. This year’s joining request sits above last year’s application without you moving anything.

03

Candidates upload in a minute, no login

They open the link on their phone, read the notice, agree, and upload, or fetch from DigiLocker where the document is available there. No account, no app, no password to reset. If they sent the wrong file they replace it while the link is open.

04

All candidate documents in one place

Not across the recruiter’s email, WhatsApp, a laptop and the HR drive. One copy, in the candidate’s folder, with who viewed or downloaded it and when. Payroll opens it there.

05

Keep sending the way you do

Copy the link into the WhatsApp chat you already have with the candidate, or open it pre-written in WhatsApp with one tap, or let the system email it. The chat stays the chat; the documents stop travelling through it.

06

Your company’s name and your logo, every time

Your company’s name is on every message the candidate gets, and your name and logo are on the page they upload to, so they know the request is from you and not a fake-offer scam.

07

Accounts for recruiters, admin for the HR head

Invite your team; the work belongs to the company, not to whoever did it. Admins control invites, settings and deletion; recruiters do the work. Every action carries the name of the person who took it.

08

Reminders that chase before joining day

Reminders run on their own until every document is in: by email to the candidate when we sent the link, a nudge to you when you sent it yourself. Twenty joiners without twenty follow-up calls.

09

No backups to run

Documents, database, keys and backups are held in India (Mumbai), encrypted, and backed up for you. Nothing to copy to an external drive on a Friday.

10

Your candidate list, yours to take

Every candidate your company holds consent for, in one file, any time you want it. And when someone asks, everything held on them exports as one file, and can be erased with the proof of erasure kept.

11

A record for when someone asks

Every notice shown, consent given, document received, viewed, downloaded, kept or deleted, on a record that cannot be quietly changed. When a candidate, an auditor or the Board asks, you show the record for that request.

12

Not selected? Ended the day you say so

Set the retention for the length of the process. When a candidate is not selected, end it on their row: their documents delete on the date and the record of their consent stays. For joiners, add a second stage for the years employment law makes you keep the file, with that law named.

06 · YOUR TEMPLATE, READY ON DAY ONE

Your template, ready on day one.

Your account starts with a request already built for a hiring team: Employee onboarding documents, with PAN, Aadhaar (masked), a bank account proof, education certificates and an emergency contact, the purpose and notice written, and the documents kept for as long as the person is with you. Edit what differs and send.

And when a role needs something different, a new template takes about a minute: name it, list the documents, set the retention. Save it once, use it for every candidate, every role. A background verification, an intern onboarding, a contractor agreement: each one is a template you make once.

READY ON DAY ONEEmployee onboarding documents
MADE BY YOUR FIRMBackground verification
MADE BY YOUR FIRMIntern onboarding
Document requests

New request

All requests
Start from a template One secure link per client
Press 1–3 to switch
Collect documents People upload what you ask for. Consent, notice and the files live here. Record consent only You hold the documents yourself. This records the notice and the consent.
Start from 1Blank 2Employee onboarding documents 3Background verification 4Intern onboarding
01

Who it goes to

Name plus email or phone
Full nameAditi Rao Email[email protected] Phone52301 48762
Saved as +91 52301 48762
Add a person Each person gets their own link. ↵ on a complete row adds the next.
02 Employee onboarding documentsfor Employment onboarding and payroll setup Change⏎ 03 6 items4 uploads · 2 written answers · all required Change⏎ 04 Kept as long as they're a clientlink open 14 days · then deleted Change⏎

What the client sees

Live
Kestrel Analytics Employee onboarding documents New client onboarding
PAN Card Document Aadhaar (masked) Document Bank account proof Document Educational certificates Document Emergency contact name Answer Emergency contact mobile AnswerYour documents are kept for as long as they're a client, then deleted. This link stays open for 14 days.
Ready to send 1 person gets their own link; the notice is frozen the moment you create. Press ⌘ ↵ to create
SCREEN · BUILDER ON “EMPLOYEE ONBOARDING DOCUMENTS” WITH THE CLIENT’S LIVE PREVIEW
07 · YOUR CLIENTS’ DOCUMENTS, KEPT SAFE

Compliance is what you are buying. Security is what makes it credible.

AWS · SOC 2 · ISO 2700119.08°N 72.88°EAP-SOUTH-1 · MUMBAIDOCUMENTS · DATABASE · KEYS · BACKUPS
THE RECORD · SHA-256
18:40CONSENT GIVEN · ADITI R.a91f
18:41DOCUMENT RECEIVED3c07
11:02VIEWED · YOUR STAFFe5d2
11:05DOWNLOADED · YOUR STAFF7b40
CHAIN INTACT
AES-256-GCMENCRYPTED AT REST · HTTPS IN TRANSIT
DOCUMENT KEY
FIRM KEY
HELD BY YOUR FIRM ONLY
PDFDOCUMENT.PDFADITI RAO
HELD BYYOU
SHARED WITHNONE
THIRD PARTIES0
THE DOCUMENT

Never shared, never sold

Your clients’ documents are not shared with or sold to any third party, now or ever. The only outside services that touch anything are the ones that run the app for you: the hosting holds encrypted files it cannot open, and the mail provider carries the message, never the document.

KEY PER DOCUMENT · KEY PER FIRM

No access to anyone outside your firm

Including us: the files remain encrypted, and no panel shows them to anyone at Confidential Dispatch. Inside the firm: roles, two-factor sign-in, and every view and download recorded. When retention ends, the document’s key is destroyed, so it cannot be rebuilt from a backup.

AES-256-GCM · HTTPS

Securely sent and stored

HTTPS in transit, AES-256-GCM at rest, a key per firm and a key per document. The upload page is receive-only: once a document is sent, nobody can view or download it from there.

SHA-256 HASH CHAIN

A record that cannot be altered

Every action is on a SHA-256 hash chain, each entry tied to the one before, and the chain’s head is written daily to write-once storage. Change one entry and every later one stops matching.

MUMBAI · AP-SOUTH-1

Held in India, in Mumbai

Documents, database, keys and backups are all held in Mumbai. Nothing about your clients is stored outside India.

THE DOCUMENT

Never shared, never sold

Your clients’ documents are not shared with or sold to any third party, now or ever. The only outside services that touch anything are the ones that run the app for you: the hosting holds encrypted files it cannot open, and the mail provider carries the message, never the document.

KEY PER DOCUMENT · KEY PER FIRM

No access to anyone outside your firm

Including us: the files remain encrypted, and no panel shows them to anyone at Confidential Dispatch. Inside the firm: roles, two-factor sign-in, and every view and download recorded. When retention ends, the document’s key is destroyed, so it cannot be rebuilt from a backup.

AES-256-GCM · HTTPS

Securely sent and stored

HTTPS in transit, AES-256-GCM at rest, a key per firm and a key per document. The upload page is receive-only: once a document is sent, nobody can view or download it from there.

SHA-256 HASH CHAIN

A record that cannot be altered

Every action is on a SHA-256 hash chain, each entry tied to the one before, and the chain’s head is written daily to write-once storage. Change one entry and every later one stops matching.

MUMBAI · AP-SOUTH-1

Held in India, in Mumbai

Documents, database, keys and backups are all held in Mumbai. Nothing about your clients is stored outside India.

HOSTED ON AWS IN MUMBAI; AWS’S INFRASTRUCTURE IS SOC 2 AND ISO 27001 CERTIFIED.

Collect the DPDP-compliant way from your next joining.

Sign up and send your first request in a few minutes. Nothing to install, for you or your clients.Start free, no card required
Read our guide: DPDP for recruitment and HR, explained