Skip to main content

Transparent pricing

Compliance infrastructure built for Indian scale.

ConsentOS is DPDP compliance software delivered as managed infrastructure. Implementation plus monthly retainer across five tiers. Not sure which tier? The free assessment identifies your DPDP obligations and recommends the right plan.

15 organisations in early access

DPDP Act 2023DPIIT Recognised

Early access pricing. These rates are held for organisations that join before 13 November 2026, when Consent Manager registration becomes mandatory.

1. Assess

A fixed-fee Readiness Assessment maps the obligations and delivers a board-ready report before any software is installed.

Readiness Assessment, ₹3,00,000 one-time

2. Operate

Starter, Growth and Scale run notices and consent records in production. Growth adds the rights portal and the breach register; Scale adds the conflict-of-law register.

Starter · Growth · Scale

3. Evidence

Compliance Vault adds the Legal Obligation Override and signed denial records for regulated BFSI. SDF adds the Significant Data Fiduciary duties with a dedicated compliance manager.

Compliance Vault · SDF / Enterprise

OperateStarter

Implementation

₹25,000 one-time

₹2,999/month

For early-stage startups building their first compliance layer.

Up to 50,000 data principals

1 product domain

Email support

  • Compliance Audit Dashboard
  • Privacy Notice generator
  • Published notice at a public URL
  • Grievance contact and team settings
  • Tier user guides
Start the Assessment

Qualification runs through the Gap Assessment. Qualified firms receive a 14-day trial workspace.

Cancel anytime · No lock-in

Adds rights portal

OperateGrowth

Implementation

₹1,25,000 one-time

₹14,999/month

For scaling startups with active DPDP obligations and user rights requirements.

Up to 500,000 data principals

3 product domains

Priority email support

  • Everything in Starter
  • Rights Management Portal
  • Log and track breach incidents against the CERT-In six-hour report window, in force today, and the DPDP Rule 7 72-hour Board notification clock that becomes enforceable on 13 May 2027. Includes notification letter drafts.
  • Data Inventory portal
  • Signed consent withdrawal events
  • Cryptographically signed receipts for every consent collected. Tamper-evident and verifiable by any party holding the organisation's signing key.
Start the Assessment

Qualification runs through the Gap Assessment. Qualified firms receive a 14-day trial workspace.

Cancel anytime · No lock-in

OperateScale

Implementation

₹2,50,000 one-time

₹34,999/month

For organisations processing data at scale across multiple products or regions.

Up to 2,000,000 data principals

Unlimited domains

Phone + email support

  • Everything in Growth
  • Compliance posture reports
  • A log that records where RBI/DPDP obligations conflict and how each was resolved. Required evidence for DPBI review.

Planned, not yet included

  • Vendor Compliance Tracker (H2 2026)
  • DPA auto-generation (H2 2026)
  • Custom domain portal (H2 2026)
  • Multi-product dashboard (H2 2026)
  • AI-powered data asset discovery (H2 2026)
Contact Sales

Cancel anytime · No lock-in

EvidenceCompliance Vault

Implementation

₹5,00,000 one-time

₹1,50,000+/month

For regulated BFSI companies carrying DPDP erasure duties alongside RBI and PMLA retention mandates.

Unlimited data principals

Unlimited domains

Dedicated implementation team + priority support

  • Everything in Scale
  • Data held under a statutory mandate (RBI, PMLA, KYC) is classified separately, supporting resolution of the retention-erasure conflict, with a denial record built for DPBI review.
  • Every erasure request is checked against your conflict register the moment it is submitted, so an admin sees a statutory-retention conflict at once. The flag never blocks the request; an admin still decides it.
  • Inspection-ready, HMAC-signed denial evidence
  • DPBI-ready audit evidence packs
Contact Sales

Cancel anytime · No lock-in

EvidenceSDF / Enterprise

Implementation

₹7,50,000+ one-time

₹1,50,000+/month

For Significant Data Fiduciaries and enterprises requiring full regulatory coverage.

Unlimited data principals

Unlimited domains

Dedicated compliance manager + SLA

  • Everything in Scale
  • Data Protection Impact Assessments are mandatory for SDFs. Documentation is pre-formatted for Data Protection Board of India inspection readiness.
  • A structured review of whether your organisation could be designated a Significant Data Fiduciary under DPDP §10 and what additional obligations would apply.
  • Priority 4-hour SLA
  • Employee training delivered by the ConsentOS team
  • Board-ready compliance report pack (PDF)
  • Custom integration support

Planned, not yet included

  • Consent Manager network API integration (late 2026)
Contact Sales

Cancel anytime · No lock-in

All prices in Indian Rupees (INR). Implementation fee is one-time, billed at onboarding. Does not change with billing period. Annual retainer: 10 months billed (2 months free). 18% GST applicable.

Compare plans

Full feature breakdown across all tiers including the BFSI Compliance Vault.

Scroll sideways to compare all five tiers.

FeatureStarterGrowthScaleVaultSDF
Core Compliance
Consent Management EngineNot included
Privacy Notice Builder
Consent Capture APINot included
Audit Dashboard
Withdrawal MechanismNot included
Data Principal Rights
Rights Management PortalNot included
Electronic Consent ArtifactsNot included
Breach Incident RegisterNot included
Data Inventory PortalNot included
Compliance Operations
Vendor Compliance TrackerNot includedNot includedRoadmapRoadmapRoadmap
DPA Auto-generationNot includedNot includedRoadmapRoadmapRoadmap
Conflict-of-law RegisterNot includedNot included
Multi-product DashboardNot includedNot includedRoadmapRoadmapRoadmap
Custom Domain PortalNot includedNot includedRoadmapRoadmapRoadmap
Advanced Governance
DPIA + DPBI ReadinessNot includedNot includedNot includedNot includedService
Consent Manager API (registered CMs)Not includedNot includedNot includedNot includedRoadmap
SDF Designation ReadinessNot includedNot includedNot includedNot includedService
Employee Training ModuleNot includedNot includedNot includedNot includedService
BFSI Compliance (Vault)
Legal Obligation OverrideNot includedNot includedNot includedNot included
Retention Schedule DashboardNot includedNot includedNot includedRoadmapNot included
Statutory Denial Register Each rejected erasure request produces an HMAC-signed, inspection-ready record of the statutory basis for the denial, attached to that request as DPBI-ready audit evidence.Not includedNot includedNot includedNot included
72-hour Breach PipelineNot includedNot includedNot includedRoadmapRoadmap
Capacity
Data PrincipalsUp to 50KUp to 500KUp to 2MUnlimitedUnlimited
Product Domains13UnlimitedUnlimitedUnlimited
Support
Support TypeEmailPriority EmailPhone + EmailDedicated ManagerDedicated Manager
30-day Implementation
No Lock-in

* Vault is a BFSI compliance module for RBI/DPDP retention conflicts. Advanced Governance features (DPIA, SDF Designation) apply to the SDF tier only.

BFSI Readiness Track

A fixed-fee readiness assessment for banks, NBFCs, and insurers. This is an engagement, not a subscription tier.

The Readiness Assessment is a 30-day engagement that maps your DPDP obligations and delivers a board-ready readiness report before you commit to a subscription. ₹3,00,000 one-time. Includes ₹25,000 subscription credit.

Learn about the Readiness Assessment

The maximum DPDP penalty is ₹250 crore, for a security safeguard failure under Section 8(5). Starter retainer: ₹2,999/month. Starter covers readiness tooling. Consent capture starts at Growth.

BFSI Regulated

Compliance Vault

The only tier built for the RBI / DPDP conflict.

The Compliance Vault is a module for BFSI-regulated entities managing RBI/DPDP retention conflicts. The SDF tier applies to organisations designated as Significant Data Fiduciaries under DPDP §10: a distinct statutory category with separate obligations.

NBFCs, fintech lenders, registered brokers, and insurance companies face a compliance challenge no standard tier addresses: RBI mandates 5-year KYC retention while the DPDP Act requires erasure on demand. The Compliance Vault implements a Legal Obligation Override. Statutory-retained data is classified and documented against DPDP consent-based data, with a denial register that produces DPBI-ready audit evidence for every rejected erasure request.

  • Compliance Vault module with Legal Obligation Override
  • Denial register for statutory erasure exceptions
  • RBI / DPDP Legal Obligation Override workflows
  • DPBI-ready audit evidence packs
  • Use-restriction documentation across data categories
  • Dedicated compliance support manager

Planned, not yet included

  • Retention schedule dashboard, per data category (H2 2026)
  • 72-hour breach notification pipeline (H2 2026)

Implementation

₹5,00,000 one-time

Monthly retainer

₹1,50,000+ /month

Exact retainer based on data principal volume and regulatory scope

Contact SalesStart the Free DPDP Gap Assessment

Every tier includes

30-Day Implementation Programme

The one-time implementation fee funds thirty days of scheduled work. It opens with a scored gap assessment of your data flows and vendor relationships, moves through policy drafting and technical integration, and closes with staff orientation and a review session at Day 30.

  • Gap assessment scored across five DPDP compliance areas
  • Compliance roadmap with prioritised remediation steps
  • Privacy policy and consent notice generation
  • Technical integration setup (consent banner, API, dashboards)
  • Staff orientation on DPDP obligations and workflows
  • Follow-up review session at Day 30

Starting from

₹25,000

one-time implementation

Start the Free DPDP Gap Assessment

Common questions.

Understand your compliance position before you choose a plan.

The free DPDP Gap Assessment covers all five compliance areas. The report will tell you which tier applies and what needs to change.

Start the Free DPDP Gap Assessment

No commitment. Ten questions, ten minutes.

Still comparing platforms? The 2026 DPDP compliance software buyer's guide ranks eight tools by obligation, and the feature comparison puts ConsentOS head to head.