Skip to content
Skip to content
A QUESTION FOR YOUR FIRM

Where is Rohan Mehta’s Aadhaar right now?

STORED IN INDIA A KEY PER DOCUMENT DELETES ITSELF

Compliance you can show. Security you can check.

LIVE AT APP.CONFIDENTIALDISPATCH.COM · INDIA
Start free, no card required

You already collect documents from your clients, over WhatsApp and email. This page is what that now costs you, and what changes when you collect through us instead.

THE OLD WAY

What collecting the old way costs you now.

A WhatsApp message asking for a PAN card. An email asking for an Aadhaar. A Google Form asking for a bank statement.

Each one collects personal data under the DPDP Act, and each one does it with no notice, no recorded consent, no stated purpose, no deletion date and no record that any of it happened.

The Act does not wait for a breach.

The obligation begins the moment you collect. From that moment you are expected to be able to show what you told the person, that they agreed, why you hold it, how long you will keep it, and what happened to it after.

The DPDP Rules were notified on 13 Nov 2025. Full compliance is due by 13 May 2027.

Between now and then, every document that arrives the old way is one more you cannot account for.

WHAT YOU GET

You get easy document collection, done right.

Every collection compliant, the moment it happens.

The request you send today, done properly: the notice written for you, your client's consent recorded before anything is stored, the deletion date set at the start. Nothing to draft, nothing to remember, nothing to catch up on later.

One place for every document.

Instead of files scattered across chats, inboxes and phones, every document your clients send sits against the request it was asked for, by client, by purpose, with its dates. You see what has arrived and what is still outstanding without asking anyone.

Chasing, done for you.

Reminders go out on their own until every item is in. The one tap you take is to nudge someone who is late.

Nothing to install, nothing to train.

Your staff send requests from a browser. Your clients open a link on their phone. If they can use WhatsApp they can use this.

Hi Rohan, please send your PAN card.11:40 ✓✓
आयकर विभाग
INCOME TAX DEPARTMENT
भारत सरकार
GOVT. OF INDIA
Permanent Account Number CardABCPM1234KROHAN MEHTA04/02/1994
11:42
Aadhaar for KYC
SSharma Associates to Rohan11:41
Hi Rohan, can you email me your Aadhaar? Need it for the KYC.
RRohan Mehta to me11:46
Hi, PFA my Aadhaar.
PDFAadhaar.pdf
Upload your bank statement *
↑Add file
Sharma Associates · Client documentsSubmit
Statement_Sep.pdf
Response recorded11:51
THE OBLIGATION
TODAY · 206 DAYS LEFT
THE MOMENT YOU COLLECT A BREACH 13 NOV 2025 · NOTIFIED 13 MAY 2027 · FULL COMPLIANCE
Document requests

New request

All requests
Start from a template One secure link per client
Press 1–3 to switch
Collect documents People upload what you ask for. Consent, notice and the files live here. Record consent only You hold the documents yourself. This records the notice and the consent.
Start from 1Blank 2KYC documents 3Client KYC · example
01

Who it goes to

Name plus email or phone
Full nameRohan Mehta Email[email protected] Phone52301 48762
Saved as +91 52301 48762
Add a person Each person gets their own link. ↵ on a complete row adds the next.
02

What to call it

2–5 words each
Title KYC documents
Purpose Client onboarding and statutory KYC This sentence appears in the client's notice exactly as written.
03

What you need

2 items
PAN CardUpload or DigiLockerRequired
Aadhaar (masked)DocumentRequired
Add a document or question ↵ on a name adds the next · collect only what the purpose needs.
04

Terms

Both appear in the notice
Keep the documents for 1 year 2 years 5 years As long as they're a client Other We must keep them beyond this period under law
The link stays open for 7 days 14 days 30 days

What the client sees

Live
Sharma Associates KYC documents Client onboarding and statutory KYC
PAN Card Document Aadhaar (masked) DocumentYour documents are kept for as long as they're a client, then deleted. This link stays open for 14 days.
Ready to send 1 person gets their own link; the notice is frozen the moment you create. Press ⌘ ↵ to create
All requests
Request · Sharma Associates

KYC documents

Add a person Close request
Links not sent yet
0every link is out — nothing left to send
View published noticeOpen · created 22 September 2026
Not sent0
Sent, still waiting2
All received3
Sent5
Fatima Shaikh[email protected] · +91 52301 48762Link valid till 6 Octin progressSent by you · 22 SepCopy link
Amit Patel[email protected]Link valid till 6 OctawaitingWe’re reminding · next 24 SepCopy link
Rohan Mehta[email protected] · +91 52301 48762Finished 23 Sepall receivedView 3 files
Neha Kapoor[email protected]Finished 23 Sepall receivedView 3 files
Suresh Iyer[email protected]Finished 23 Sepall receivedView 3 files
All requests
Request · Sharma Associates

KYC documents

Add a person Close request
Links not sent yet
0every link is out — nothing left to send
View published noticeOpen · created 22 September 2026
Not sent0
Sent, still waiting3
All received1
Sent4
Rohan Mehta[email protected] · +91 52301 48762Link valid till 6 OctawaitingWe’re reminding · next 29 SepCopy link
Fatima Shaikh[email protected] · +91 52301 48762Link valid till 6 OctawaitingSent by you · 22 SepCopy link
Amit Patel[email protected]Link valid till 6 Octin progressSent by us · 22 SepCopy link
Neha Kapoor[email protected]Finished 23 Sepall receivedView 4 files
Sent to Rohan Mehta; we will remind them
Hi Rohan, Sharma Associates has asked you for the following for 'Client onboarding and statutory KYC', through Confidential Dispatch: • PAN Card • Aadhaar (masked) • Address proof • Full legal name What you send goes to Sharma Associates, encrypted, and is shared with nobody else. The link below is personal to you and is valid until 6 Oct 2026. You can send them from here: https://app.confidentialdispatch.com/c/7kq2m4 Sent from Sharma Associates, via Confidential Dispatch15:32 ✓✓
WHAT YOUR CLIENTS GET

Your clients get to exercise their rights.

01 · BEFORE THEY SEND
app.confidentialdispatch.com/c/7kq2m4
S
Request fromSharma Associates
1 Consent
2 Items
3 Send

Client onboarding documents

For new client onboarding. Four things are needed, and nothing you send here can be read back from this page.

This link was sent to +91 ••••• ••623
Items requested4 items
Respond by6 Oct 2026
Documents to upload3 items
Fetch from DigiLocker PAN Card can come straight from your DigiLocker
1
PAN Card Photo or PDF · up to 50 MB
Add
2
Aadhaar (masked) Photo or PDF · up to 50 MB
Add
3
Address proof Photo or PDF · up to 50 MB
Add
Details to type1 item
4 Full legal name
Type your answer
Send items Add at least one item to send
Privacy noticeWhat you are agreeing to
CollectingPAN Card, Aadhaar (masked), Address proof, Full legal name
PurposeNew client onboarding
RetentionAs long as you remain a client of Sharma Associates
Your rightsAccess · correction · erasure · withdraw consent anytime · nominate someone to act for you
GrievancePriya Sharma · [email protected]
ComplaintsData Protection Board of India, if unresolved
Read the full notice
Common questions
How are my documents stored?ReadIs my data secure?ReadWho can see my data?Read
Secured by Confidential Dispatch
This page can only receive documents. It never shows what was sent, to anyone.
Encryption

Encrypted in transit and at rest, on every upload.

Key custody

Sealed under a key that belongs to Sharma Associates alone.

Data residency

Stored in India, on AWS in Mumbai.

Further reading
What is the DPDP Act?Your rights under the DPDP ActDoes DPDP apply to my business?
Company
About Confidential DispatchPrivacy policyTerms of use
02 · WHEN THEY FINISH
app.confidentialdispatch.com/c/7kq2m4
S
Request fromSharma Associates
Consent
Items
Send

Client onboarding documents

For new client onboarding. Four things are needed, and nothing you send here can be read back from this page.

This link was sent to +91 ••••• ••623
Items sent4 of 4
Sent at22 Sep, 3:43 pm
Sent. Sharma Associates has all four items.
Take your copy nowThis receipt and your rights link are shown once. When you close this page they will not come back: print, email or copy them before you leave. If you lose the link, contact Sharma Associates directly for anything about your data.
Print or save as PDF
Or email a copy to yourself
Your email addressEmail me a copy
Your rights linkhttps://app.confidentialdispatch.com/w/m8q2vk7r4t
Copy link
Consent receiptYour copy of what you agreed to
Given byRajesh Kumar
Given toSharma Associates
For requestClient onboarding documents
Given at22 Sep 2026, 3:43 pm IST
Notice version1
Items sent4 of 4
What you sentPAN Card · Aadhaar (masked) · Address proof · Full legal name
Notice fingerprint · SHA-256Version 1
3f9a 1c27 8e4b 0d65 a2f8 7c19 4be0 93d1 6a5f 2e8c 0b74 d93a 51ef 86c2 7a0d 4b19Sharma Associates holds the same fingerprint. Matching them confirms this is the exact notice you agreed to, unaltered.
The full notice you agreed toIncluded in the printed copyShow
Your rightsYou can withdraw this consent at any time, and ask for a copy of what is held, a correction or deletion, using your rights link. You can also contact Sharma Associates’ grievance contact for any of these.
Grievance contactPriya Sharma · [email protected]If your grievance is not resolved, you may complain to the Data Protection Board of India.
Secured by Confidential Dispatch
This page can only receive documents. It never shows what was sent, to anyone.
Encryption

Encrypted in transit and at rest, on every upload.

Key custody

Sealed under a key that belongs to Sharma Associates alone.

Data residency

Stored in India, on AWS in Mumbai.

Further reading
What is the DPDP Act?Your rights under the DPDP ActDoes DPDP apply to my business?
Company
About Confidential DispatchPrivacy policyTerms of use
03 · ANY TIME AFTER
app.confidentialdispatch.com/w/m8q2vk

A notice they can read.

Before they send anything, your client sees your firm's name, what you are asking for, why, how long you will keep it, and what they can do about it later. In plain words, on their phone.

A receipt.

When they finish, a record of exactly what they agreed to, which they can keep or have emailed to themselves.

Rights they can exercise without calling you.

The receipt carries a link that stays valid. From it they can withdraw their consent, or ask for a copy, a correction or deletion. The request reaches you in the app with the clock running; they see its state on the same page.

For your firm this is not a cost.

A client who is told clearly what you hold and why trusts you with the next document. A client who can act on their own rights does not need to call your office to do it. And every client sees that your firm collects to the standard the large firms are held to.

IN THE BACKGROUND

DPDP compliance happens in the background.

The parts of the DPDP Act that firms forget are the ones that fall due months or years after a collection. These run without you.

Deletion on the date you set.

You are asked once, fifteen days before: keep with a reason, renew with the client, or delete now. Do nothing, and it is deleted on the date, backups included.

Renewals and rights requests, handled in the app.

A renewal goes to the client's phone with a fresh notice. A rights request arrives with its statutory period counting down. Each answer goes on the record.

A record you can show.

Every step is written down as it happens, nobody can change it afterwards, including us, and it stays after the documents are deleted. When a regulator, a client or a counterparty asks how a document was collected, you show them the record for that request.

TimeWhat happenedVia
7 Oct 20263
16:20 Document viewed · Rajesh Kumar · KYC documents #2486 · by you app
11:42 Consent recorded · Ananya Iyer · ITR filing #2481 · by the person link
09:15 Rights request answered: done · Karan Malhotra · KYC documents #2477 · by you app
6 Oct 20263
18:03 Consent renewed · Fatima Shaikh · KYC documents #2470 · by the person link
18:03 Consent recorded (renewal) · Fatima Shaikh · KYC documents #2469 · by the person link
10:31 Rights request received: a copy · Karan Malhotra · KYC documents #2462 · by the person link
5 Oct 20263
00:00 Retention: deleted on schedule, the renewal went unanswered · Arjun Rao · KYC documents #2455 · by system —
00:00 Retention: a decision is coming up · Meera Joshi · ITR filing #2454 · by system —
00:00 Retention: deleted on schedule · Sanjay Gupta · Loan file #2453 · by system —
4 Oct 20264
17:48 Document viewed · Ananya Iyer · ITR filing #2449 · by you app
12:06 Consent recorded · Rohan Desai · ITR filing #2444 · by the person link
09:30 Retention: consent renewal prepared automatically · Fatima Shaikh · KYC documents #2440 · by system —
09:30 Retention: a decision is coming up · Fatima Shaikh · KYC documents #2439 · by system —
THE SECOND SELL

Security you can check.

Compliance is what you are buying. Security is what makes it credible, and you can check each of these.

CHECK 01

Stored in India.

Documents, database, keys and backups are stored at rest in Mumbai, on AWS. AWS's infrastructure is SOC 2 and ISO 27001 certified.

Documents Mumbai
Database Mumbai
Keys Mumbai
Backups Mumbai
AWS · ASIA PACIFIC (MUMBAI) · AP-SOUTH-1
CHECK 02

Encrypted, with a key per firm and a key per document.

In transit and at rest. Deleting a document destroys its key, so a deleted file cannot be recovered from a backup or an old version.

KEY · PAN CARD.PDFIN USE
7f3a·91c2
BACKUP · 3 OCT 02:00 PAN card.pdf
UNREADABLE · ITS KEY IS GONE
CHECK 03

Only your firm can see your documents.

We have no direct access to your documents and no screen that shows them to us.

WHAT CONFIDENTIAL DISPATCH STAFF CAN OPEN
PAN card.pdf NO ACCESS
Aadhaar.pdf NO ACCESS
Form 16.pdf NO ACCESS
0 documents visible to us. NO VIEWER · NO ADMIN SCREEN · NO SUPPORT ACCESS
CHECK 04

Access you control.

Roles for your team, two-factor sign-in, and every view and download written to the record with who and when.

THE RECORD · AS IT IS WRITTEN
PRIYA NAIR · ASSOCIATE · MEMBER · 2FA ON
CHECK 05

Your data leaves with you.

Every firm, free or paid, current or leaving, can take a complete, self-verifying export of its documents and its compliance evidence, and verify it without us.

214 DOCUMENTS
96 CONSENTS AND RECEIPTS
12 NOTICE VERSIONS
1,482 RECORD ENTRIES
Verified without us. EVERY ENTRY MATCHES · NO CALL TO CONFIDENTIAL DISPATCH
BY INDUSTRY

Built for how your firm works. Pick yours.

01 NBFCs and loan agents Borrower KYC from field agents and DSAs, with consent on record before the file reaches credit. 02 Fintechs Merchant onboarding and re-KYC collected by ops, with the record your partner bank's audit will ask for. 03 HR and recruiters Joining documents from every candidate, and a clean end for the ones who were not selected. 04 Chartered accountants PAN, Form 16 and bank statements every filing season, kept by client and sorted by year. 05 Visa consultants The whole dossier, every passport page included, collected before the appointment and deleted after the decision. 06 Law firms Identity proof, deeds and affidavits for every matter, in one place instead of five. 07 Insurance agents Proposal KYC and claim documents, with a fresh consent at renewal instead of a fresh upload. 08 Clinics and hospitals Reports, insurance cards and discharge summaries from patients and attendants, kept off the doctor's WhatsApp.

Collect documents the compliant way, starting today.

Sign up and send your first request in a few minutes. Nothing to install, for you or your clients.Start free, no card required