About
About Gevox
Software for the professionals who deliver DPDP compliance. One workspace per client, every finding and document cited to the section, the same inputs producing the same output.
What Gevox is
Gevox is software for the professionals who deliver Digital Personal Data Protection Act compliance to other organisations: GRC and information-security consultancies, independent privacy consultants and virtual Data Protection Officers, chartered accountancy firms, practising company secretaries and law firms.
Each client is held in its own workspace. An engagement runs inside it from intake to evidence: the website assessment, the obligation register, the legal documents, the rights and breach registers with their statutory clocks, monitoring, and an exportable compliance file.
Who builds it
Gevox is built by Suryansh Sagar, who is studying law (BBA LLB) and wrote the templates from which Gevox generates its nine legal documents.
It is operated by Suryansh Sagar, trading as Gevox, from Meerut, Uttar Pradesh.
How findings and documents are produced
The website assessment applies fixed checks. The same site, examined twice in the same state, returns the same result. Documents are generated from fixed templates and the answers given at intake. The summary at the top of a scan report is assembled by fixed rules from the findings beneath it.
In the practitioner product no language model decides a finding, drafts a clause or writes a summary. Two optional features of the separate business workspace, an analysis of an audit questionnaire and a check of a clause the user writes, use a language model and are marked as doing so.
Every finding and every clause names the section of the Act or the rule of the DPDP Rules 2025 it rests on, so a practitioner can check it against the text. Client data is stored in India (Mumbai).
How accuracy is kept
Citations are read from the official text of the Act and the Rules, not reconstructed from memory.
On 3 October 2026 every DPDP citation in the product, 3,716 in all, was checked against the Act as passed and the Rules. More than a hundred were corrected, among them the provision for breach intimation (Section 8(6) and Rule 7), the published contact under Section 8(9), and the numbering of the penalty Schedule. An automated test now prevents those errors from returning. Corrections are recorded in the changelog.
What Gevox does not do
Gevox does not give legal advice, and nothing it produces states that a client is compliant. A finding is a position on a date. Advice to the client, and responsibility for it, remain with the practitioner.
Contact
- General enquiries
- suryansh@gevox.in
- Grievances
- grievance@gevox.in
- Registered address
- 3/200 Rakshapuram, Mawana Road, Meerut, Uttar Pradesh, 250001