🔴 Ransomware campaign targeting Indian BFSI sector — Bengaluru nodes⚡ CERT-In advisory: Critical Apache CVE — patch deployment recommended🛡️ PraharAI blocked 12,847 intrusion attempts this week⚠️ Phishing surge targeting Indian e-commerce customers — Q2 2026✅ DPDP Act enforcement window open — schedule your compliance audit🔴 APT group targeting Indian critical infrastructure — BFSI & Healthcare⚡ New CERT-In directive: 6-hour breach reporting mandatory for all enterprises🛡️ Privaxa SOC: 99.97% detection uptime — all systems operational🔴 Ransomware campaign targeting Indian BFSI sector — Bengaluru nodes⚡ CERT-In advisory: Critical Apache CVE — patch deployment recommended🛡️ PraharAI blocked 12,847 intrusion attempts this week⚠️ Phishing surge targeting Indian e-commerce customers — Q2 2026✅ DPDP Act enforcement window open — schedule your compliance audit🔴 APT group targeting Indian critical infrastructure — BFSI & Healthcare⚡ New CERT-In directive: 6-hour breach reporting mandatory for all enterprises🛡️ Privaxa SOC: 99.97% detection uptime — all systems operational
India's Leading Cyber Security Services Company
Cyber Security Services
& DPDP Compliance
End-to-end cyber security services, DPDP Act 2023 compliance, ISO 27001 certification, ISO 27701 implementation, DPO as a service, and cyber security training for Indian enterprises. From penetration testing to managed SOC — Privaxa is India's trusted cyber defence partner.
Initializing threat intelligence engine...
THREAT POSTURE DASHBOARD
0Threats Blocked
0Critical Alerts
0%Compliance Score
DPDP Compliance
87%
Endpoint Security
94%
Data Encryption
100%
Vendor Risk Score
72%
● SYSTEM NOMINAL
● 3 ALERTS
● 1 BREACH
0Enterprises Protected
0Uptime SLA
0Logs Processed
0Breach Response
Why Choose Privaxa for Cyber Security Services
DPDP Compliance & Cyber Security Services Built for India
From DPDP Act compliance and DPO advisory to CERT-In directives — we provide complete cyber security services and DPDP compliance solutions that make data protection achievable for every Indian organisation.
DPDP Compliance Services
Complete DPDP Act 2023 compliance with DPO advisory, consent management, data principal rights workflows, breach notifications, and gap assessments — everything your organisation needs to be DPDP ready.
AI-Powered Cyber Security
Advanced cyber security services powered by machine learning models trained on Indian threat landscapes, government advisories, and sector-specific risk profiles for proactive threat detection.
Enterprise Cyber Security Solutions
Zero-trust architecture, end-to-end encryption, and role-based access controls — enterprise-grade cyber security services meeting ISO 27001, ISO 27701, and CERT-In standards with full ISMS and PIMS implementation support.
Compliance & Certifications
ISO 27001 Certified
ISO 27701 PIMS
DPDP Act 2023 Ready
CERT-In Empanelled
SOC 2 Type II
Zero-Trust Architecture
RBI / SEBI Compliant
Client Trust
What Our Clients Say
"
Privaxa's DPDP Saathi platform transformed our compliance posture. We went from scrambling over notices to having a live compliance dashboard. Exceptional product.
RK
Rahul Krishnan
CISO
"
PraharAI cut our mean time to detect by 75%. Their India-specific threat feeds caught attacks that global vendors completely missed. Truly purpose-built for us.
PS
Priya Sharma
VP Technology
"
CyberShiksha's multilingual training modules made security awareness something employees actually wanted to do. Phishing click rates dropped from 23% to under 4% in 6 months.
AM
Aditya Mehta
Head of IT
Cyber Intelligence
Latest Insights
DPDP Act
DPDP Act 2023 Enforcement: What Enterprises Must Do Before the Deadline
With enforcement timelines crystallising, organisations must complete consent architecture, appoint DPOs, and deploy data principal rights portals immediately.
· 8 min read
Threat Intel
India's Critical Infrastructure Under Siege: APT Groups Targeting BFSI
PraharAI threat intelligence reveals a 340% surge in targeted attacks on Indian banking infrastructure. Here's what your SOC needs to watch for.
· 6 min read
Zero-Trust
Why Zero-Trust Architecture Is No Longer Optional for Indian Enterprises
CERT-In's 6-hour reporting mandate and DPDP Act liability provisions make zero-trust the only defensible security posture.
· 5 min read
India's Trusted Cyber Security Company
India's Leading Cyber Security Services & DPDP Compliance Company
We Don't Just Secure Systems. We Secure Futures.
Founded by a team of cyber security professionals and DPDP policy experts who worked with MEITY, Privaxa Technologies was built with a single mission: to make enterprise-grade cyber security services and DPDP Act compliance accessible to every Indian organisation.
We understand that cyber security is not a product — it's a practice. From DPDP compliance and DPO advisory to managed SOC and cyber security training, our platforms are designed to become part of your organisation's DNA — always monitoring, always learning, always protecting.
Headquartered at 161 Roehampton Ave, Toronto, Canada, with operations in Rajanna Sircilla, Telangana, India, we serve clients across BFSI, healthcare, e-commerce, and government sectors, bringing contextual cyber security intelligence and DPDP compliance expertise built specifically for India's unique regulatory and threat landscape.
● ISO 27001 Aligned
● DPDP Act 2023 Ready
● CERT-In Compliant
Leadership
The Minds Behind the Mission
A diverse team of security experts, engineers, and business leaders united by a shared passion for making India cyber-safe.
Mani Kumar
CHAIRMAN
Driving vision, innovation, and long-term strategy at Privaxa, shaping India's next generation of cyber-resilient enterprises.
Akshay Kumar
FOUNDER & CEO
Worked with MEITY drafting DPDP policies. Solid expertise in DPDP Act compliance, ISO 27001, ISO 27701, SOC operations, dark web monitoring, threat intelligence, and VAPT — building Privaxa to protect every Indian enterprise.
Mohammad Akheel
CO-FOUNDER & CTO
Technology strategist specialising in networking, AI/ML, and cloud platforms powering Privaxa's product suite — architecting India's most advanced cyber defence infrastructure.
Cyber Security & DPDP Products
DPDP Compliance, Cyber Security & Training Platforms
Purpose-built cyber security and DPDP compliance platforms that address India's most pressing data protection, threat intelligence, and cyber security training challenges.
Live
DPDP Saathi — DPDP Compliance Platform
// DPDP ACT COMPLIANCE & DPO MANAGEMENT ENGINE
India's first end-to-end DPDP Act 2023 compliance management platform. Automate DPDP compliance, manage DPO responsibilities, track consent lifecycle, handle data principal rights, generate audit-ready DPDP reports, and stay ahead of regulatory changes. Complete DPDP services from gap assessment to certification — all from a single intelligent dashboard.
Next-generation cyber security services platform powered by machine learning. PraharAI delivers managed SOC, real-time threat detection, AI-driven incident response, and actionable cyber security intelligence — reducing MTTD and MTTR by up to 80% for Indian enterprises.
Real-time threat detection & correlation engine
ML-powered anomaly detection & UEBA
Automated incident response playbooks
India-specific threat intelligence feeds
SIEM integration & log management
24×7 SOC-as-a-Service option
New
CyberShiksha — Cyber Security Training Platform
// CYBER SECURITY TRAINING & AWARENESS LMS
India's most comprehensive cyber security training and awareness platform. Deliver enterprise cyber security training, build a security-conscious culture through gamified learning, simulated phishing campaigns, and certification programs aligned to DPDP Act and Indian cyber security standards.
300+ modules in English, Hindi & regional languages
Complete cyber security services from DPDP compliance, ISO 27001 certification, and ISO 27701 PIMS implementation to penetration testing, managed SOC, and cyber security training. Our experts work alongside your team to design, implement, and continuously improve your security and privacy posture.
01
DPDP Compliance Services & DPO Advisory
Complete DPDP Act 2023 compliance services including DPDP gap assessment, policy drafting, DPO as a service, consent architecture design, data protection impact assessments, and regulatory representation before the Data Protection Board of India.
02
Security Operations Centre (SOC)
24×7 managed SOC services staffed by Tier 2 and Tier 3 analysts. We monitor your infrastructure, investigate threats, and respond to incidents — all backed by PraharAI.
03
Penetration Testing & VAPT
Offensive security assessments aligned to OWASP, PTES, and CERT-In guidelines. Web apps, APIs, mobile, cloud, and network — we find vulnerabilities before the attackers do.
04
Cloud Security Architecture
Zero-trust cloud architectures on AWS, Azure, and GCP. Security posture management, CSPM, workload protection, and DevSecOps pipeline integration.
05
Incident Response & Forensics
Rapid breach containment, digital forensics, and regulatory reporting support. Our DFIR team can be on-site or remote within 4 hours for critical incidents.
06
Cyber Security Training & Awareness
Enterprise cyber security training powered by CyberShiksha LMS. Customised cyber security courses, phishing simulations, DPDP awareness modules, and cultural transformation programmes that turn your workforce into your first line of cyber defence.
07
Vendor Risk Management
Third-party risk assessment frameworks, automated vendor questionnaires, continuous monitoring, and DPA templates aligned to DPDP Act requirements.
08
vCISO & Strategic Advisory
Virtual CISO services for organisations that need board-level security leadership. Strategy, budgeting, programme governance, and regulatory engagement.
09
CERT-In Empanelled Services
Registered for IS audits, ISMS implementation (ISO 27001), RBI/SEBI/IRDAI cyber compliance, and government security assessments.
10
ISO 27001 Certification & ISMS Implementation
End-to-end ISO/IEC 27001:2022 certification consultancy. ISMS gap assessment, risk treatment planning, policy documentation, Statement of Applicability, internal audits, management review facilitation, and certification body liaison for Indian enterprises.
11
ISO 27701 Implementation & PIMS Consultancy
ISO/IEC 27701:2019 Privacy Information Management System implementation aligned to DPDP Act 2023. Privacy gap analysis, PII processing mapping, controller and processor controls, PIMS documentation, and certification readiness for complete privacy compliance.
Get Cyber Security Services & DPDP Compliance Quote
Start Your Cyber Security & DPDP Journey
Whether you need cyber security services, DPDP compliance consultation, ISO 27001 certification, ISO 27701 implementation, DPO advisory, cyber security training, or a penetration testing quote — our team of experts is ready.
Let's Build a Safer India Together
From a quick question to a full enterprise deployment — reach out and a Privaxa security consultant will be in touch within one business day.
Email
info@privaxa.in
Phone
+91 79977 00218
Headquarters
161 Roehampton Ave, Toronto, Canada
India Office
Journalist Colony, Rajanna Sircilla, Telangana, India
Systems online. Awaiting your message...
Response time: < 24 hours
Send Us a Message
Fill in the form and we'll get back to you shortly.
Cyber Security Careers India
Build the Future of Indian Cyber Security
We're a team of passionate cyber security professionals, DPDP compliance experts, and DPO advisors united by a single purpose — making India's digital economy safer. If you live and breathe cyber security, we want to meet you.
Mission-Driven Culture
Every line of code, every security assessment protects real people. Our work matters.
Continuous Learning
Conference budgets, certification support, and access to CyberShiksha premium for all employees.
Cutting-Edge Work
Work with AI, threat intelligence, zero-trust architectures, and India's most complex security challenges.
Open Roles
Current Opportunities
No Open Positions Right Now
We're not actively hiring at this time, but we're always interested in exceptional talent. Share your profile and we'll reach out when the right opportunity opens up.
Compliant with the Digital Personal Data Protection Act, 2023 (India)
Data Fiduciary Privaxa Technologies
Effective Date 01 January 2026
Last Updated 10 September 2026
Version 2.0
DPO Email dpo@privaxa.in
Scope: This Privacy Policy applies to all personal data collected through privaxa.in (the "Website"), our products (DPDP Saathi, PraharAI, CyberShiksha), and any communication you initiate with us. It is issued under Section 5 and Section 6 of the Digital Personal Data Protection Act, 2023 ("DPDP Act") and governs how Privaxa Technologies, as a Data Fiduciary, processes your personal data.
§ 01 Identity of the Data Fiduciary
Privaxa Technologies ("Privaxa", "we", "us", "our") is a company incorporated under the Companies Act, 2013, registered in Telangana, India. We are the Data Fiduciary responsible for the personal data processed through this Website.
Detail
Information
Registered Name
Privaxa Technologies
Headquarters
161 Roehampton Ave, Toronto, Canada
India Office
Journalist Colony, Rajanna Sircilla, Telangana – 505301, India
Under Section 2(t) of the DPDP Act, "personal data" means any data about an individual who is identifiable by or in relation to such data. We collect the following categories:
Category
Data Elements
Collection Point
Mandatory?
Identity Data
First name, Last name
Contact form, Newsletter
Yes
Contact Data
Email address, Phone number
Contact form
Email: Yes / Phone: No
Professional Data
Organisation name, Job function interest
Contact form
No
Communication Data
Message content, enquiry details
Contact form
No
Technical Data
IP address (stored as irreversible SHA-256 hash only), browser type, page visited
We do not collect sensitive personal data as defined under the DPDP Act (financial information, health data, biometric data, official identifiers) through this Website.
§ 03 Consent Notice & Consent Framework
In accordance with Section 6 of the DPDP Act, we are required to present a clear and plain-language notice before or at the time of collecting your personal data. Your consent must be free, specific, informed, unconditional, and unambiguous.
When you submit any form on this Website, the following notice applies:
CONSENT NOTICE — PRIVAXA TECHNOLOGIES LIMITED
By submitting this form, you freely and unambiguously consent to Privaxa Technologies collecting and processing the personal data you provide (name, email, organisation, phone, message) for the specific purpose stated at the point of collection. You understand that:
(a) Your consent is voluntary and you may withdraw it at any time by emailing info@privaxa.in;
(b) Withdrawal of consent will not affect the lawfulness of processing done before withdrawal;
(c) You have the right to access, correct, and erase your data;
(d) We will not process your data for any purpose beyond what is stated without obtaining fresh consent;
(e) This notice is issued under Section 5 and Section 6 of the Digital Personal Data Protection Act, 2023.
3.2 Itemised Consent — Purpose-Specific
Form / Touchpoint
Data Collected
Specific Purpose
Consent Type
Contact Form
Name, Email, Organisation, Interest area, Message
Responding to your business enquiry; scheduling a product demo or consultation
Explicit — checkbox implied by form submission with consent notice
No data stored by us; WhatsApp's own policy applies
Initiating a conversation via WhatsApp
Voluntary redirect — no data stored
3.3 Withdrawal of Consent
You may withdraw your consent at any time, as easily as you gave it, by:
Emailing info@privaxa.in with subject line: "Withdraw Consent – [Your Name]"
For newsletter: clicking the unsubscribe link in any email we send you
We will action your withdrawal request within 72 hours. Withdrawal does not affect the lawfulness of any processing carried out before withdrawal.
§ 04 Purposes of Processing & Legal Basis
Under Section 4 of the DPDP Act, personal data may be processed only for a lawful purpose for which the Data Principal has given consent, or for a legitimate use specified under Section 7.
Compliance with legal obligations (CERT-In, court orders)
Section 7(c) — Legal obligation under Indian law
As required by law
As mandated
Service improvement & analytics (aggregate, non-personal)
Section 7(d) — Legitimate Use
Aggregate page-view data only, no PII
12 months
We never use your personal data for: targeted advertising, profiling, sale to third parties, automated decision-making that produces legal effects, or any purpose not listed in the table above.
§ 05 Data Storage, Security & Transfers
5.1 Storage Location
Your personal data is stored in MongoDB Atlas (AWS ap-south-1 — Mumbai region), ensuring data residency within India in compliance with applicable Indian laws.
5.2 Security Measures
Encryption in transit — All data transmitted over HTTPS using TLS 1.2/1.3
Encryption at rest — MongoDB Atlas AES-256 encryption for all stored data
IP pseudonymisation — IP addresses are hashed using SHA-256 with a secret salt; the original IP cannot be recovered
Access control — Database access restricted to the application server via IP allowlist and credential-based authentication
Rate limiting — All form endpoints are protected by rate limiting (5 requests/hour per IP)
Input sanitisation — All inputs validated and sanitised against XSS, NoSQL injection, and HTTP parameter pollution
Security headers — Helmet.js enforces CSP, X-Frame-Options, HSTS, and other OWASP-recommended headers
5.3 Cross-Border Data Transfers
Your data is stored and processed within India (AWS Mumbai). We do not transfer personal data outside India unless required by law or explicitly consented to by you. Any future cross-border transfers will comply with Section 16 of the DPDP Act and the Central Government's notified list of permitted countries.
5.4 Data Breach Notification
In the event of a personal data breach, we will notify the Data Protection Board of India as required under Section 8(6) of the DPDP Act. Affected Data Principals will be informed without delay in accordance with the Board's prescribed format and timeline.
§ 06 Data Retention & Erasure
Data Category
Retention Period
Basis
Contact form submissions
3 years from date of submission
Business necessity; legal disputes
Newsletter subscriptions
Until unsubscribed + 30 days (purge cycle)
Consent-based
Server logs (hashed IP)
90 days rolling
Security monitoring
Cookie consent records
12 months
Regulatory accountability
Upon expiry of the retention period, or upon a valid erasure request, personal data is permanently deleted from our database and backup systems within 30 days, in compliance with Section 8(7) of the DPDP Act.
§ 07 Your Rights as a Data Principal
Under Chapter III (Sections 11–14) of the DPDP Act, you have the following rights as a Data Principal:
Right to Access Information (§11)
Request a summary of personal data processed by us, the processing activities, identities of Data Processors and third parties with whom data is shared.
Right to Correction & Erasure (§12)
Request correction of inaccurate or misleading personal data, and erasure of data no longer necessary for the purpose it was collected.
Right to Grievance Redressal (§13)
Lodge a grievance with our DPO. If unresolved within 30 days, escalate to the Data Protection Board of India at dpboard.gov.in.
Right to Nominate (§14)
Nominate another individual to exercise your rights in the event of your death or incapacity. Contact our DPO to register a nomination.
Right to Withdraw Consent (§6)
Withdraw consent at any time. Processing done before withdrawal remains lawful. We will stop further processing upon receipt of withdrawal request.
Right against Automated Processing
We do not use automated decision-making or profiling that produces legal or significant effects on you. All decisions are human-reviewed.
How to Exercise Your Rights
Email info@privaxa.in with subject: "DPDP Rights Request – [Right Type] – [Your Name]". We will respond within 30 days. We may request proof of identity before processing your request.
§ 08 Children's Personal Data
In accordance with Section 9 of the DPDP Act, we do not knowingly collect personal data from children (individuals under 18 years of age) without verifiable parental consent. Our Website and services are directed at business professionals and organisations.
If we discover that personal data of a child has been collected without verified parental consent, we will immediately delete such data. If you believe we have inadvertently collected data about a child, please contact info@privaxa.in immediately.
§ 09 Third Parties & Data Processors
We engage the following Data Processors (entities that process data on our behalf under binding agreements):
Processor
Purpose
Data Shared
Location
MongoDB Atlas (AWS)
Database hosting and storage
All submitted personal data
AWS ap-south-1 (Mumbai, India)
Hostinger (web hosting)
Website hosting and delivery
Web traffic (no personal data stored by host)
India / EU (varies by plan)
We do not: sell personal data, share it with advertising networks, transfer it to data brokers, or disclose it to any third party except as listed above or as required by a court order or statutory authority under Indian law.
In the event of a legal obligation to disclose (e.g., CERT-In directive, court order, law enforcement), we will disclose only the minimum data required and, where legally permitted, will notify you prior to disclosure.
§ 10 Cookies & Tracking Technologies
10.1 What We Use
Cookie Name
Type
Purpose
Duration
privaxa_consent
Functional (Essential)
Stores your cookie consent preference
12 months
Session cookies
Functional (Essential)
Maintain session state for the web application
Session (deleted on browser close)
10.2 What We Do Not Use
Third-party analytics cookies (Google Analytics, Hotjar, etc.)
Advertising or retargeting cookies
Social media tracking pixels
Fingerprinting or supercookie technologies
10.3 Managing Cookies
You may accept or decline non-essential cookies via the consent banner shown on your first visit. You may also clear cookies at any time via your browser settings. Declining cookies will not affect your ability to use the Website.
§ 11 Grievance Redressal Mechanism
In accordance with Section 13 of the DPDP Act, we have established the following grievance redressal process:
Step 1 — Contact our DPO: Email dpo@privaxa.in with full details of your grievance. We will acknowledge within 48 hours and resolve within 30 days.
Step 2 — Escalate to the Data Protection Board: If your grievance is not resolved within 30 days, or you are unsatisfied with the resolution, you may file a complaint with the Data Protection Board of India at dpboard.gov.in.
Step 3 — Appellate Tribunal: Decisions of the Board may be appealed before the Appellate Tribunal established under the DPDP Act.
§ 12 Obligations as Data Fiduciary
Under Section 8 of the DPDP Act, Privaxa Technologies, as a Data Fiduciary, undertakes to:
Process personal data only for the specified, lawful purpose for which consent was obtained
Implement reasonable technical and organisational security safeguards
Notify the Data Protection Board and affected Data Principals in the event of a data breach
Erase personal data upon withdrawal of consent or upon the purpose being fulfilled, whichever is earlier
Ensure that Data Processors engaged by us are bound by equivalent data protection obligations
Not process personal data outside the purposes stated in this Policy without fresh consent
Maintain accuracy and completeness of personal data, and correct it on request
§ 13 Exemptions Applicable
Certain processing activities may be exempt from specific provisions of the DPDP Act under Section 17, including:
Processing necessary for the prevention, detection, investigation, or prosecution of offences under Indian law
Processing by courts or tribunals
Processing for the purposes of national security
Processing of personal data that is publicly available
We will invoke exemptions only to the minimum extent necessary and will document each invocation.
§ 14 Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or regulatory guidance. We will:
Update the "Last Updated" date at the top of this Policy
For material changes (changes to data types collected, new purposes, or new third-party sharing): notify active users via email and present a fresh consent notice as required under Section 6 of the DPDP Act
Maintain previous versions available on request
Continued use of the Website after notice of material changes constitutes acceptance of the updated Policy, where re-consent is not legally required.
This Privacy Policy is governed by the laws of India. Any disputes arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts at Rajanna Sircilla, Telangana, India.
Apply for
Fill in your details and we'll be in touch.
Cyber Intelligence Updates
Stay Ahead of Every Threat
Weekly threat intelligence, DPDP Act updates, and exclusive cybersecurity insights — delivered to your inbox.
Consent Notice — Privaxa Technologies
Under the Digital Personal Data Protection Act, 2023, we need your informed consent before collecting any data. We use only essential functional cookies to operate this website. We collect personal data (name, email, organisation) only when you voluntarily submit a form, solely for the purpose stated at that point.
We do not use advertising, analytics, or tracking cookies. Read our full Privacy Policy & Consent Framework to understand exactly what we collect and why.
