Blog

Compliance, DLP, and monitoring - written straight

Practical posts on DPDP compliance, data loss prevention, and what transparent monitoring actually looks like for Indian professional services firms. No "10x your productivity" filler.

Compliance

DPDP Rules 2025 don't take effect on one date - they take effect on three

Three enforcement dates, not one: Nov 2025, Nov 2026, May 2027. What's already live, what changes in three months, and what firms should be doing right now.

25 August 2026

How it works

The exact four-part check Custelis runs before a file transfer gets logged, warned, or blocked

No content scanning, no black box. The who/what/where/when model behind every DLP rule, and why prevention beats passive logging.

25 August 2026

For CA & audit firms

"We log file activity" isn't the same as "we have a client-data audit trail"

What actually needs tracking: who's assigned to what, access flagged against assignment, and a real gate on bulk exports.

25 August 2026