Day 0
Book
Full scope
The 15-Day DPDP & AI Deal-Ready Sprint: full scope
Get DPDP-ready before May 2027 and answer your customers' privacy and AI questions, with an ISO/IEC 42001 baseline built in. Everything below is included in one fixed price.
- ₹50,000 all-inclusive
- 15 working days
- Founding price for the first 3 clients
- 50% to book, 50% at the readout
- Kick-off within 5 working days of booking
Deliverables
What you get.
| Deliverable | What's in it | Format |
|---|---|---|
| Personal data map | Every system, your role, storage, AI vendors, retention | Google Sheets, in your own Drive |
| DPDP gap report | Red/amber/green against the Act and Rules | Written report |
| Readiness dashboard and roadmap | Your path to May 2027, kept up to date during the sprint | Your own Google Sheets |
| Customer answer bank | About 40 ready answers to DPDP, privacy and AI questions | Editable document |
| AI and sub-processor register | Every AI model and sub-processor, plus a one-page AI data-use statement | Register + one-page statement |
| Breach response runbook | The first 72 hours, step by step | Written runbook |
| Privacy notice draft | Ready for your lawyer to review and approve | Editable document |
| Rights and grievance kit | Process, email templates, request tracker | Templates + tracker |
| ISO/IEC 42001 readiness scorecard | Where you stand against clauses 4–10 and Annex A | Scorecard |
| Draft AI policy | Plus an impact snapshot of up to 2 AI features | Editable document |
Included: day-3 exposure snapshot · 45-minute recorded team briefing · trust-page copy for your website
ISO/IEC 42001
How ISO/IEC 42001 fits.
| Sprint deliverable | Where it maps in ISO/IEC 42001 |
|---|---|
| ISO/IEC 42001 readiness scorecard | Clauses 4–10 and Annex A — an honest baseline of where you stand |
| Draft AI policy | Clause 5.2 — AI policy |
| AI and sub-processor register | Annex A — third-party and supplier AI controls |
| AI data-use statement | Annex A — transparency and information for interested parties |
| Impact snapshot of up to 2 AI features | Annex A — AI system impact assessment |
| Breach response runbook | Annex A — reporting and handling of AI-related incidents |
Not included: the control-by-control gap assessment, AI risk treatment and Statement of Applicability (clause 6.1.3), internal audit (9.2) and management review (9.3).
Timeline
Fifteen working days, about 4–5 hours of your time
Day 1
Kick-off call (90 min)
Day 3
Exposure snapshot
Day 4
Tech walkthrough with your CTO (60 min)
Day 12
Draft pack for comments
Day 14
Team briefing
Day 15
Readout and final pack
Next 60 days
Free-fix window
Your part
What we need from you.
- One point person who replies within 2 working days.
- Your system list, vendor list and current privacy policy at kick-off.
- One 60-minute walkthrough with your CTO.
- Honest answers, because the pack only describes controls that actually exist.
Guarantee
The 60-day free-fix guarantee.
If a customer's DPDP, privacy or AI questionnaire finds a gap in the pack within 60 days of the readout, I fix it free within 5 working days.
- Covers privacy and AI questions about the product and entity in scope.
- Relies on the facts you gave being accurate.
- Doesn't cover security evidence (pen-test reports, SOC 2), contract positions or legal opinions.
- Where a control doesn't exist, I write the honest answer and add the fix to your roadmap.
Cancel before the kick-off call and your booking payment is refunded in full.
Scope boundaries
What's not included.
- —Legal opinions, legal sign-off or contract negotiation
- —Drafting or redlining DPAs
- —Changes to your product, code or cloud settings
- —Security testing (VAPT), ISO 27001, SOC 2
- —Certification audits or any certification guarantee
- —A full ISO/IEC 42001 gap assessment, Statement of Applicability or internal audit
- —More than 1 entity, 1 product, 15 systems or 2 AI features
- —Ongoing DPO support after the 60-day window
Not sure where you stand?
Take the 10-minute self-check, or book a 30-minute call.