DPDPA 2023 Compliance

India's Digital Personal Data Protection Act, 2023 ("DPDPA") establishes obligations for organisations that handle the personal data of individuals ("data principals"). Anura is built to help legal practices meet these obligations, and to meet our own obligations as a service provider.

Our role under the DPDPA

When you use Anura to manage your practice, you (the firm or advocate) are typically the Data Fiduciary in respect of your clients' personal data, determining the purposes and means of processing. Anura generally acts as a Data Processor, processing that data on your instructions to provide the Service. For data we collect directly about our own users (e.g. your account details), Anura is the Data Fiduciary.

Consent & notice

• We collect personal data with notice and, where required, consent - clearly stating the purpose at the point of collection.
• Consent can be withdrawn as easily as it was given.
• We help you, as a fiduciary, capture and manage client consents within the platform where applicable.

Data principal rights

We support the exercise of data-principal rights, including the rights to access, correction, erasure, grievance redressal, and nomination. Requests can be raised at privacy@anura.app, and our tools help fiduciaries respond to their own clients' requests.

Security safeguards

We implement reasonable security safeguards as required by the DPDPA, including AES-256 encryption, access controls, MFA, and audit logging. See our Security page.

Data residency

Personal data processed through Anura is stored within India. See our Data Residency page for specifics on regions and subprocessors.

Breach notification

In the event of a personal data breach, we will notify the relevant parties and, where applicable, the Data Protection Board of India and affected data principals, in the manner and within the timelines required by law.

Data Protection / Grievance Officer

We have designated a point of contact for data-protection matters and grievances. Reach our Grievance Officer at privacy@anura.app.

How we help you comply

DPDPA theme	How Anura helps
Consent & notice	Purpose-specific notices and consent capture within client workflows.
Data minimisation	Role-based access so staff see only what they need.
Principal rights	Tools to locate, export, correct, and delete a person's data.
Security	Encryption, MFA, and full audit trails by default.
Residency	All data stored and processed in India.

This page describes how Anura supports DPDPA compliance and is not a substitute for your own legal assessment. For a Data Processing Addendum (DPA), contact legal@anura.app.