DPDP Act 2023 → enforcement live§8(6) + Rule 7(2): 72h breach reportMax penalty: ₹250 Cr22 scheduled languagesap-south-1 · MumbaiConsent Manager framework: pilotDPDP Rules: operationalisedDPDP Act 2023 → enforcement live§8(6) + Rule 7(2): 72h breach reportMax penalty: ₹250 Cr22 scheduled languagesap-south-1 · MumbaiConsent Manager framework: pilotDPDP Rules: operationalised
[01]The platform

Six modules. One SDK.

Crawlshark is a single control plane for India's Digital Personal Data Protection Act. Drop the SDK once, wire the dashboard to your existing stack, and replace nine spreadsheets, three Notion docs and a frantic Slack channel.

Time to first consent
< 1 day
Connectors
80+
Languages
22
Hosting
ap-south-1
[02]Modules

What's in the box.

Module 01
Consent Ledger
Every yes, every no — cryptographically signed.

Capture granular consent across web, mobile and server. Every event is hash-chained, timestamped, geo-stamped and exportable as evidence. Withdrawal is one tap and propagates downstream within 60 seconds.

  • Tamper-evident audit log
  • 60-second withdrawal propagation
  • Per-purpose granularity
  • Consent Manager framework ready
Module 02
Notice Engine
Itemised notices in 22 Indian languages.

Auto-translated, auto-versioned notices that render in English plus any of the 22 scheduled languages on demand. Diff every change, gate releases on legal review and prove which version a user saw on which day.

  • 22 official languages
  • Version diff & rollback
  • Legal-review approval gates
  • Per-user notice history
Module 03
DSR Workbench
Access, correction, erasure — under 72 hours.

A single queue for every Data Principal request. Auto-discover personal data across 80+ systems, redact, package and ship. SLAs are tracked per request with auto-escalation to your DPO.

  • 80+ source connectors
  • SLA timer per request
  • PII redaction & packaging
  • Auto-escalation to DPO
Module 04
Breach War Room
72-hour playbook, on rails.

From signal to Board filing. Pre-approved templates for DPB notification, draft Data Principal disclosures, on-call paging, evidence preservation, and a live timeline that survives audit.

  • DPB filing templates
  • On-call escalation
  • Evidence preservation
  • Post-mortem export
Module 05
Vendor & Processor Registry
Know every place data goes.

Catalogue every processor, sub-processor and cross-border flow. Track DPAs, audit reports and India-residency status. Get alerted the moment a vendor changes posture.

  • DPA library
  • Residency tracking
  • Sub-processor changes alerts
  • RoPA export
Module 06
Audit Vault
An auditor's dream, your engineer's relief.

Self-serve evidence room for internal audit, external counsel and the Data Protection Board. Time-bounded access, watermarked exports, full read-only logs.

  • Watermarked exports
  • Time-bounded access
  • Read-only auditor seats
  • Section-mapped evidence
[03]Architecture

Built like the rest of your stack.

One TypeScript SDK, REST and GraphQL APIs, a React component library and Terraform modules. Webhooks for everything. SOC 2 Type II, ISO 27001 and India-resident by default.

SDKs
JS · React · Next · iOS · Android · Flutter · Python · Go · Java
APIs
REST · GraphQL · Webhooks · Server-side events
Hosting
AWS ap-south-1 (Mumbai) · OCI Hyderabad failover
Identity
SAML · SCIM · Okta · Microsoft · Google Workspace
Compliance
SOC 2 Type II · ISO 27001 · ISO 27701 · CERT-In aligned
Throughput
1.2B consent events/mo at p95 < 90ms
[04]What it saves you

Replace nine tools and a panicked spreadsheet.

₹2,400 Cr+
Penalty exposure mitigated across customers in 18 months
87%
Average reduction in audit preparation time
72 hrs → 4 hrs
Median DSR resolution time after Crawlshark
9 → 1
Tools replaced (consent, DSR, notice, breach, RoPA, audit, etc.)
6 weeks → 4 days
Average go-live for mid-market deployments
100%
Of consent events captured with cryptographic evidence

See the platform end-to-end.

A 30-minute guided tour: SDK install, consent capture, a live DSR walked from intake to delivery, and the audit vault our customers ship to the DPB.