The product, in plain words
DPDP compliance software for privacy practices
By Suryansh Sagar, founder of Gevox. Last updated 6 October 2026.
Gevox is the privacy practice workspace: one sealed workspace per client, holding a cited website assessment, lawyer-written documents, the statutory registers and an evidence file the adviser signs off. It runs on India’s DPDP Act 2023 and DPDP Rules 2025, and the adviser stays the adviser: Gevox does not sign, certify or advise.
From the Gevox Readiness Index: Gevox scanned the websites of twenty Indian firms that sell DPDP advice. Nineteen set cookies or loaded tracking before anyone had consented, and the average score was 71 out of 100.
What one client workspace holds
Each client is kept apart from every other client, and everything the engagement produces sits in the same place.
- A website assessment of 22 checks, each cited to the section of the Act or the rule it comes from.
- Nine document types, rendered from templates a lawyer wrote and filled in from the client’s own answers.
- The rights and grievance register, with the ninety-day ceiling from Rule 14 counted for each request.
- The breach register, with the duties and the seventy-two hour report from Rule 7.
- An evidence file that can be exported for the client.
What stays with the adviser
Gevox does the assembling, so the adviser can do the judging. A report can be exported only after its reviewer has signed it off, and the sign-off lasts thirty days, so a report that is quietly out of date cannot go out under a practice’s name. The sign-off records the reviewer’s review in Gevox. It is not a certificate, and Gevox does not advise.
The same answer, every time
The checks and the documents are rule-based, not guessed. The same website and the same answers produce the same findings and the same clauses on every run, which is what lets an adviser put a name to the result. Under Section 8 the client stays responsible for its processors, and the workspace keeps that list with the contracts.
Who it is for
Privacy consultants, CA and CS practices and law firms that run DPDP work for more than one client. Plans are priced by the number of client workspaces, and the practice’s own name and logo go on the cover on Suite and Firm.
Questions practitioners ask
- Is this software for a business managing its own compliance?
- It is built for the practitioner who delivers DPDP work for many clients. A business with a single organisation to look after can still use it, and the free website scan needs no account.
- Does Gevox certify that a client is compliant?
- No. Gevox records what was found and what the reviewer signed off. It does not certify, sign or advise, and the sign-off is not a certificate.
- Where is the data held?
- In India, in Mumbai, with each client kept apart from every other client at the database layer.
- Does it use AI to write the findings?
- The checks and the documents are rule-based and repeat exactly. The only generated text is the plain-English summary on a scan report.
Read next
Start with three clients
Run a real engagement on Gevox for thirty days, then decide.
The Starter Pass is Rs 999 once, for 3 client workspaces with every module unlocked. After that, Suite is Rs 375 per client each month.
The DPDP brief
One email a month. What moved in the Act, and what our scans found.
Every claim cited to its section, the same way these pages are. No product news, no roundups of other people’s blogs.