DPDP Act 2023 → enforcement live§8(6) + Rule 7(2): 72h breach reportMax penalty: ₹250 Cr22 scheduled languagesap-south-1 · MumbaiConsent Manager framework: pilotDPDP Rules: operationalisedDPDP Act 2023 → enforcement live§8(6) + Rule 7(2): 72h breach reportMax penalty: ₹250 Cr22 scheduled languagesap-south-1 · MumbaiConsent Manager framework: pilotDPDP Rules: operationalised
[01]Product · Module 02

DSR workbench that hits the 72-hour clock.

Crawlshark routes every Data Principal Request — Access, Correction, Erasure, Withdrawal, Nomination — through a verified identity gate, fans it out across your data stores, and closes the loop with a signed receipt.

Median resolution
41 hrs
Auto-discovered systems
80+
Identity verification
Aadhaar OKYC
SLA breach rate
0.4%
[02]Use case

One inbox. Every rights request. Zero spreadsheet handoffs.

[01]
Access (§11)

Generate a portable PDF + JSON snapshot of every byte the Data Principal has shared, across SaaS, warehouse, and partner systems.

[02]
Correction & erasure (§12)

Cascade updates and deletions to 80+ connected systems with a signed proof-of-action receipt for each one.

[03]
Withdrawal (§6(4))

Revoke any subset of purposes — marketing, analytics, profiling — without losing transactional context.

[04]
Nomination (§14)

Built-in nominee onboarding with relationship verification and audit trail, including post-mortem rights.

Statutory response window
30 days
DPDP Rules 2025, Rule 12
Crawlshark SLA (commercial)
72 hrs
median 41 hrs
Tickets / mo / FTE
180→1,400
before vs after
Connector coverage
92%
of Indian SaaS stack
[03]Targets

Who lives or dies by the 72-hour clock.

Who
Today's pain
With Crawlshark
B2C platforms (>1M MAU)
Single legal team manually replying to hundreds of erasure requests a month.
Self-serve portal + auto-discovery; legal only handles edge cases.
Marketplaces
Erasing a buyer without breaking seller ledgers / GST records.
Purpose-aware deletion that preserves statutory retention.
Edtech
Minor accounts + parental nomination + erasure on graduation.
Workflow templates for §9 children's consent + §14 nomination.
Healthtech
ABDM-bound records can't be deleted, but must be 'erased' under DPDP.
Suppression + access revocation flows that satisfy both regimes.

Close the 72-hour clock before it closes on you.

Plug Crawlshark into your stack and resolve your next Data Principal request before the end of the sprint.

Book a demo See pricing