Your team is putting customer documents into free online tools
Someone in operations needs a 2 MB Aadhaar scan down to 200 KB before it will upload. They find a free converter and paste the customer's ID into it. The file lands on a server you have never assessed, run by a company you have no agreement with.
Under India's Digital Personal Data Protection Act, engaging a processor does not move accountability off you. The usual reassurance from those tools — “we delete your file after an hour” — does not change that. Deleting later still means processing now.
There is no processor, because the file never leaves the browser
Every tool here runs as code in the browser on your employee's machine. Masking, compression, conversion and OCR all happen locally. The document is never sent to us, which means there is no copy of it on our infrastructure, no retention window to negotiate, and no sub-processor chain to assess.
You do not have to take that on trust. Open any tool, open your browser's network tab, and process a file: no request carries the document. Your security team can verify the claim in about two minutes, which is usually faster than reading a vendor questionnaire.
What a business plan includes
The tools are free and stay free. What a business pays for is the paperwork and the deployment that lets it use them officially.
A data processing agreement
The document your vendor review actually asks for, signed. Free tools do not offer one, which is usually where the ticket stalls.
Proof nothing is uploaded
A written description of how processing works, so your security team can verify the claim rather than take our word for it. Open the network tab and watch — no file request leaves the page.
A deployment inside your network
The same tools served from your own infrastructure, so there is no external dependency to review at all.
A usage record, without the contents
Counts, timestamps and who ran what — the audit trail a reviewer wants, holding none of the document data itself.
Who this is for
- NBFCs, lenders and fintechs collecting Aadhaar and PAN for KYC
- Telecom and insurance teams processing identity documents at volume
- HR and payroll teams handling payslips, Form 16 and bank details
- CA and accounting firms working on client financial records
- Rental, brokerage and property teams verifying tenant identity
Send this page to whoever signs off on vendors
Tell us which documents your team handles and what your review needs. We will send the agreement and the security write-up, and set up a private deployment if you want one.
Request our DPANothing here is legal advice. How the DPDP Act applies depends on your business — your counsel should make that call, and we will give them whatever they need to.