DPDP is not GDPR
Vocabulary matters. Data Principal, Data Fiduciary, Data Processor. We use the Act's words, not a translation.
Why we exist
India deserves privacy infrastructure that was written for it.
The Digital Personal Data Protection Act is the most consequential piece of technology regulation India has passed. It does not just ask businesses to put up a banner — it asks them to know where personal data lives, why it is being held, who can access it, and how to take it back.
Most products serving this market are either retrofitted GDPR suites or banner tools wearing new labels. We started from the Act, not from another product. The result is a consent and privacy platform that is sectionally mapped to DPDP — and to the Draft Rules — by design.
We are bootstrapped. That is a deliberate choice. We are answerable to customers, not to a fundraising calendar.
What we believe
Six principles that shape what we ship.
Consent is granular or it is not consent
Per-data-point, per-purpose, per-recipient, per-retention. If a banner toggles a category, the Data Principal has not really chosen.
Discovery starts in code
Personal data leaks before it ships. truScanner scans code, truFinder scans data — most competitors stop at the database, we do not.
Breach response is a human job
A seventy-two-hour clock is not a CI/CD pipeline. AI drafts. Humans send. We will not ship anything that erases the lawyer.
Bootstrapped is a feature
No VC pressure means no compliance tax. We price for India today, not for a Series B board next quarter.
Integrations respect security
Signed events, scoped tokens, in-VPC scanners. We do not work around your security team — we sit with them.
Incubation
IITMIC Incubated.
truConsent is incubated at the IIT Madras Incubation Cell (IITMIC) — one of India's foremost deep-tech research environments. The incubation is more than a label: it shapes how we think about privacy as infrastructure, not as a banner.
For enterprise buyers, IITMIC Incubated is a signal of technical depth and academic rigour. For us, it is a working partnership with researchers who think about systems for a living.
The TruHQ context
Part of a focused identity & trust group.
truConsent is a TruHQ company — alongside truVerify (KYC and identity) and truAgent. We share research, security posture and engineering excellence across the group, while staying tightly focused on the privacy mandate.
The benefit to customers: a deeper bench than a single bootstrapped startup would normally bring — without the diluted focus a big suite would force.
IITMIC
Incubated at IIT Madras Incubation Cell — deep-tech academic rigour
0
Cents of VC equity dilution
100%
Workflows mapped to the DPDP Act 2023
3
TruHQ companies — privacy, identity, AI
Meet the Team
Passionate experts dedicated to making data privacy simple and accessible
Company
Legal entity
truConsent is a product of Tangled Threads Technologies Private Limited, an Indian private limited company, IITMIC Incubated and headquartered in Bangalore, Karnataka, India.