AI-powered compliance, threat intelligence, and cybersecurity solutions purpose-built for India's regulatory landscape. Stay ahead of threats. Stay DPDP compliant.
Initializing threat intelligence engine...
THREAT POSTURE DASHBOARD
0Threats Blocked
0Critical Alerts
0%Compliance Score
DPDP Compliance
87%
Endpoint Security
94%
Data Encryption
100%
Vendor Risk Score
72%
● SYSTEM NOMINAL
● 3 ALERTS
● 1 BREACH
0Enterprises Protected
0Uptime SLA
0Logs Processed
0Breach Response
Why Privaxa
Built for the Indian Compliance Ecosystem
From DPDP Act to CERT-In directives — we understand the regulatory landscape and build tools that make compliance achievable.
DPDP Act Ready
Pre-built workflows for data principal rights, consent management, and breach notifications aligned to India's DPDP Act 2023.
AI-Driven Intelligence
Machine learning models trained on Indian threat landscapes, government advisories, and sector-specific risk profiles.
Enterprise-Grade Security
Zero-trust architecture, end-to-end encryption, and role-based access controls meeting the highest security standards.
Compliance & Certifications
ISO 27001 Aligned
DPDP Act 2023 Ready
CERT-In Empanelled
SOC 2 Type II
Zero-Trust Architecture
RBI / SEBI Compliant
Client Trust
What Our Clients Say
"
Privaxa's DPDP Saathi platform transformed our compliance posture. We went from scrambling over notices to having a live compliance dashboard. Exceptional product.
RK
Rahul Krishnan
CISO
"
PraharAI cut our mean time to detect by 75%. Their India-specific threat feeds caught attacks that global vendors completely missed. Truly purpose-built for us.
PS
Priya Sharma
VP Technology
"
CyberShiksha's multilingual training modules made security awareness something employees actually wanted to do. Phishing click rates dropped from 23% to under 4% in 6 months.
AM
Aditya Mehta
Head of IT
Cyber Intelligence
Latest Insights
DPDP Act
DPDP Act 2023 Enforcement: What Enterprises Must Do Before the Deadline
With enforcement timelines crystallising, organisations must complete consent architecture, appoint DPOs, and deploy data principal rights portals immediately.
May 2025 · 8 min read
Threat Intel
India's Critical Infrastructure Under Siege: APT Groups Targeting BFSI
PraharAI threat intelligence reveals a 340% surge in targeted attacks on Indian banking infrastructure. Here's what your SOC needs to watch for.
April 2025 · 6 min read
Zero-Trust
Why Zero-Trust Architecture Is No Longer Optional for Indian Enterprises
CERT-In's 6-hour reporting mandate and DPDP Act liability provisions make zero-trust the only defensible security posture in 2025.
March 2025 · 5 min read
Who We Are
India's Cyber Defence Vanguard
We Don't Just Secure Systems. We Secure Futures.
Founded by a team of security professionals and technologists, Privaxa Technologies Limited was built with a single mission: to make enterprise-grade cybersecurity and data privacy compliance accessible to every Indian organization.
We understand that security is not a product, it's a practice. Our platforms are designed to become part of your organisation's DNA — always monitoring, always learning, always protecting.
Headquartered in Rajanna Sircilla, Telangana, we serve clients across BFSI, healthcare, e-commerce, and government sectors, bringing contextual intelligence built specifically for India's unique regulatory and threat landscape.
● ISO 27001 Aligned
● DPDP Act 2023 Ready
● CERT-In Compliant
Leadership
The Minds Behind the Mission
A diverse team of security experts, engineers, and business leaders united by a shared passion for making India cyber-safe.
Mani Kumar
CHAIRMAN
Driving vision, innovation, and long-term strategy at Privaxa, shaping India's next generation of cyber-resilient enterprises.
Akshay Kumar
FOUNDER & CEO
Worked with MEITY drafting DPDP policies. Solid expertise in DPDP Act compliance, ISO 27001, ISO 27701, SOC operations, dark web monitoring, threat intelligence, and VAPT — building Privaxa to protect every Indian enterprise.
Mohammad Akheel
CO-FOUNDER & CTO
Technology strategist specialising in networking, AI/ML, and cloud platforms powering Privaxa's product suite — architecting India's most advanced cyber defence infrastructure.
Our Arsenal
Three Weapons Against Cyber Threats
Purpose-built platforms that address India's most pressing cybersecurity and data privacy challenges.
Live
DPDP Saathi
// DATA PRIVACY COMPLIANCE ENGINE
India's first end-to-end DPDP Act 2023 compliance management platform. Automate consent collection, manage data principal rights, generate audit-ready reports, and stay ahead of regulatory changes — all from a single intelligent dashboard.
Next-generation Security Operations Centre powered by machine learning. PraharAI ingests billions of events, correlates threats in real-time, and provides actionable intelligence — reducing MTTD and MTTR by up to 80%.
Real-time threat detection & correlation engine
ML-powered anomaly detection & UEBA
Automated incident response playbooks
India-specific threat intelligence feeds
SIEM integration & log management
24×7 SOC-as-a-Service option
New
CyberShiksha
// CYBER LEARNING MANAGEMENT SYSTEM
India's most comprehensive cybersecurity awareness and training platform. Build a security-conscious culture through gamified learning, simulated phishing, and certification programs aligned to Indian standards.
300+ modules in English, Hindi & regional languages
Simulated phishing & social engineering campaigns
Role-based learning paths & certifications
Gamified leaderboards & compliance tracking
API integration with existing HR systems
Board-ready security culture dashboards
What We Do
End-to-End Cyber Defence Services
Beyond products — our experts work alongside your team to design, implement, and continuously improve your security posture.
01
Data Privacy & DPDP Compliance
End-to-end compliance programme management. Gap assessments, policy drafting, DPO advisory, consent architecture design, and regulatory representation.
02
Security Operations Centre (SOC)
24×7 managed SOC services staffed by Tier 2 and Tier 3 analysts. We monitor your infrastructure, investigate threats, and respond to incidents — all backed by PraharAI.
03
Penetration Testing & VAPT
Offensive security assessments aligned to OWASP, PTES, and CERT-In guidelines. Web apps, APIs, mobile, cloud, and network — we find vulnerabilities before the attackers do.
04
Cloud Security Architecture
Zero-trust cloud architectures on AWS, Azure, and GCP. Security posture management, CSPM, workload protection, and DevSecOps pipeline integration.
05
Incident Response & Forensics
Rapid breach containment, digital forensics, and regulatory reporting support. Our DFIR team can be on-site or remote within 4 hours for critical incidents.
06
Security Awareness Training
Powered by CyberShiksha LMS. Customised training, phishing simulations, and cultural transformation programmes that turn your workforce into your first line of defence.
07
Vendor Risk Management
Third-party risk assessment frameworks, automated vendor questionnaires, continuous monitoring, and DPA templates aligned to DPDP Act requirements.
08
vCISO & Strategic Advisory
Virtual CISO services for organisations that need board-level security leadership. Strategy, budgeting, programme governance, and regulatory engagement.
09
CERT-In Empanelled Services
Registered for IS audits, ISMS implementation (ISO 27001), RBI/SEBI/IRDAI cyber compliance, and government security assessments.
Get In Touch
Start Your Defence Journey
Whether you need a demo, a quote, or just want to talk security — our team is ready.
Let's Build a Safer India Together
From a quick question to a full enterprise deployment — reach out and a Privaxa security consultant will be in touch within one business day.
Email
info@privaxa.in
Phone
+91 79977 00218
Office
Journalist Colony, Rajanna Sircilla, Telangana, India
Systems online. Awaiting your message...
Response time: < 24 hours
Send Us a Message
Fill in the form and we'll get back to you shortly.
Join the Mission
Build the Future of Indian Cybersecurity
We're a team of passionate defenders, builders, and educators united by a single purpose — making India's digital economy safer. If you live and breathe security, we want to meet you.
Mission-Driven Culture
Every line of code, every security assessment protects real people. Our work matters.
Continuous Learning
Conference budgets, certification support, and access to CyberShiksha premium for all employees.
Cutting-Edge Work
Work with AI, threat intelligence, zero-trust architectures, and India's most complex security challenges.
Open Roles
Current Opportunities
No Open Positions Right Now
We're not actively hiring at this time, but we're always interested in exceptional talent. Share your profile and we'll reach out when the right opportunity opens up.
Compliant with the Digital Personal Data Protection Act, 2023 (India)
Data Fiduciary Privaxa Technologies Limited
Effective Date 01 January 2026
Last Updated 10 September 2026
Version 2.0
DPO Email info@privaxa.in
Scope: This Privacy Policy applies to all personal data collected through privaxa.in (the "Website"), our products (DPDP Saathi, PraharAI, CyberShiksha), and any communication you initiate with us. It is issued under Section 5 and Section 6 of the Digital Personal Data Protection Act, 2023 ("DPDP Act") and governs how Privaxa Technologies Limited, as a Data Fiduciary, processes your personal data.
§ 01 Identity of the Data Fiduciary
Privaxa Technologies Limited ("Privaxa", "we", "us", "our") is a company incorporated under the Companies Act, 2013, registered in Telangana, India. We are the Data Fiduciary responsible for the personal data processed through this Website.
Detail
Information
Registered Name
Privaxa Technologies Limited
Registered Address
Journalist Colony, Rajanna Sircilla, Telangana – 505301, India
Under Section 2(t) of the DPDP Act, "personal data" means any data about an individual who is identifiable by or in relation to such data. We collect the following categories:
Category
Data Elements
Collection Point
Mandatory?
Identity Data
First name, Last name
Contact form, Newsletter
Yes
Contact Data
Email address, Phone number
Contact form
Email: Yes / Phone: No
Professional Data
Organisation name, Job function interest
Contact form
No
Communication Data
Message content, enquiry details
Contact form
No
Technical Data
IP address (stored as irreversible SHA-256 hash only), browser type, page visited
We do not collect sensitive personal data as defined under the DPDP Act (financial information, health data, biometric data, official identifiers) through this Website.
§ 03 Consent Notice & Consent Framework
In accordance with Section 6 of the DPDP Act, we are required to present a clear and plain-language notice before or at the time of collecting your personal data. Your consent must be free, specific, informed, unconditional, and unambiguous.
When you submit any form on this Website, the following notice applies:
CONSENT NOTICE — PRIVAXA TECHNOLOGIES LIMITED
By submitting this form, you freely and unambiguously consent to Privaxa Technologies Limited collecting and processing the personal data you provide (name, email, organisation, phone, message) for the specific purpose stated at the point of collection. You understand that:
(a) Your consent is voluntary and you may withdraw it at any time by emailing info@privaxa.in;
(b) Withdrawal of consent will not affect the lawfulness of processing done before withdrawal;
(c) You have the right to access, correct, and erase your data;
(d) We will not process your data for any purpose beyond what is stated without obtaining fresh consent;
(e) This notice is issued under Section 5 and Section 6 of the Digital Personal Data Protection Act, 2023.
3.2 Itemised Consent — Purpose-Specific
Form / Touchpoint
Data Collected
Specific Purpose
Consent Type
Contact Form
Name, Email, Organisation, Interest area, Message
Responding to your business enquiry; scheduling a product demo or consultation
Explicit — checkbox implied by form submission with consent notice
No data stored by us; WhatsApp's own policy applies
Initiating a conversation via WhatsApp
Voluntary redirect — no data stored
3.3 Withdrawal of Consent
You may withdraw your consent at any time, as easily as you gave it, by:
Emailing info@privaxa.in with subject line: "Withdraw Consent – [Your Name]"
For newsletter: clicking the unsubscribe link in any email we send you
We will action your withdrawal request within 72 hours. Withdrawal does not affect the lawfulness of any processing carried out before withdrawal.
§ 04 Purposes of Processing & Legal Basis
Under Section 4 of the DPDP Act, personal data may be processed only for a lawful purpose for which the Data Principal has given consent, or for a legitimate use specified under Section 7.
Compliance with legal obligations (CERT-In, court orders)
Section 7(c) — Legal obligation under Indian law
As required by law
As mandated
Service improvement & analytics (aggregate, non-personal)
Section 7(d) — Legitimate Use
Aggregate page-view data only, no PII
12 months
We never use your personal data for: targeted advertising, profiling, sale to third parties, automated decision-making that produces legal effects, or any purpose not listed in the table above.
§ 05 Data Storage, Security & Transfers
5.1 Storage Location
Your personal data is stored in MongoDB Atlas (AWS ap-south-1 — Mumbai region), ensuring data residency within India in compliance with applicable Indian laws.
5.2 Security Measures
Encryption in transit — All data transmitted over HTTPS using TLS 1.2/1.3
Encryption at rest — MongoDB Atlas AES-256 encryption for all stored data
IP pseudonymisation — IP addresses are hashed using SHA-256 with a secret salt; the original IP cannot be recovered
Access control — Database access restricted to the application server via IP allowlist and credential-based authentication
Rate limiting — All form endpoints are protected by rate limiting (5 requests/hour per IP)
Input sanitisation — All inputs validated and sanitised against XSS, NoSQL injection, and HTTP parameter pollution
Security headers — Helmet.js enforces CSP, X-Frame-Options, HSTS, and other OWASP-recommended headers
5.3 Cross-Border Data Transfers
Your data is stored and processed within India (AWS Mumbai). We do not transfer personal data outside India unless required by law or explicitly consented to by you. Any future cross-border transfers will comply with Section 16 of the DPDP Act and the Central Government's notified list of permitted countries.
5.4 Data Breach Notification
In the event of a personal data breach, we will notify the Data Protection Board of India as required under Section 8(6) of the DPDP Act. Affected Data Principals will be informed without delay in accordance with the Board's prescribed format and timeline.
§ 06 Data Retention & Erasure
Data Category
Retention Period
Basis
Contact form submissions
3 years from date of submission
Business necessity; legal disputes
Newsletter subscriptions
Until unsubscribed + 30 days (purge cycle)
Consent-based
Server logs (hashed IP)
90 days rolling
Security monitoring
Cookie consent records
12 months
Regulatory accountability
Upon expiry of the retention period, or upon a valid erasure request, personal data is permanently deleted from our database and backup systems within 30 days, in compliance with Section 8(7) of the DPDP Act.
§ 07 Your Rights as a Data Principal
Under Chapter III (Sections 11–14) of the DPDP Act, you have the following rights as a Data Principal:
Right to Access Information (§11)
Request a summary of personal data processed by us, the processing activities, identities of Data Processors and third parties with whom data is shared.
Right to Correction & Erasure (§12)
Request correction of inaccurate or misleading personal data, and erasure of data no longer necessary for the purpose it was collected.
Right to Grievance Redressal (§13)
Lodge a grievance with our DPO. If unresolved within 30 days, escalate to the Data Protection Board of India at dpboard.gov.in.
Right to Nominate (§14)
Nominate another individual to exercise your rights in the event of your death or incapacity. Contact our DPO to register a nomination.
Right to Withdraw Consent (§6)
Withdraw consent at any time. Processing done before withdrawal remains lawful. We will stop further processing upon receipt of withdrawal request.
Right against Automated Processing
We do not use automated decision-making or profiling that produces legal or significant effects on you. All decisions are human-reviewed.
How to Exercise Your Rights
Email info@privaxa.in with subject: "DPDP Rights Request – [Right Type] – [Your Name]". We will respond within 30 days. We may request proof of identity before processing your request.
§ 08 Children's Personal Data
In accordance with Section 9 of the DPDP Act, we do not knowingly collect personal data from children (individuals under 18 years of age) without verifiable parental consent. Our Website and services are directed at business professionals and organisations.
If we discover that personal data of a child has been collected without verified parental consent, we will immediately delete such data. If you believe we have inadvertently collected data about a child, please contact info@privaxa.in immediately.
§ 09 Third Parties & Data Processors
We engage the following Data Processors (entities that process data on our behalf under binding agreements):
Processor
Purpose
Data Shared
Location
MongoDB Atlas (AWS)
Database hosting and storage
All submitted personal data
AWS ap-south-1 (Mumbai, India)
Hostinger (web hosting)
Website hosting and delivery
Web traffic (no personal data stored by host)
India / EU (varies by plan)
We do not: sell personal data, share it with advertising networks, transfer it to data brokers, or disclose it to any third party except as listed above or as required by a court order or statutory authority under Indian law.
In the event of a legal obligation to disclose (e.g., CERT-In directive, court order, law enforcement), we will disclose only the minimum data required and, where legally permitted, will notify you prior to disclosure.
§ 10 Cookies & Tracking Technologies
10.1 What We Use
Cookie Name
Type
Purpose
Duration
privaxa_consent
Functional (Essential)
Stores your cookie consent preference
12 months
Session cookies
Functional (Essential)
Maintain session state for the web application
Session (deleted on browser close)
10.2 What We Do Not Use
Third-party analytics cookies (Google Analytics, Hotjar, etc.)
Advertising or retargeting cookies
Social media tracking pixels
Fingerprinting or supercookie technologies
10.3 Managing Cookies
You may accept or decline non-essential cookies via the consent banner shown on your first visit. You may also clear cookies at any time via your browser settings. Declining cookies will not affect your ability to use the Website.
§ 11 Grievance Redressal Mechanism
In accordance with Section 13 of the DPDP Act, we have established the following grievance redressal process:
Step 1 — Contact our DPO: Email info@privaxa.in with full details of your grievance. We will acknowledge within 48 hours and resolve within 30 days.
Step 2 — Escalate to the Data Protection Board: If your grievance is not resolved within 30 days, or you are unsatisfied with the resolution, you may file a complaint with the Data Protection Board of India at dpboard.gov.in.
Step 3 — Appellate Tribunal: Decisions of the Board may be appealed before the Appellate Tribunal established under the DPDP Act.
§ 12 Obligations as Data Fiduciary
Under Section 8 of the DPDP Act, Privaxa Technologies Limited, as a Data Fiduciary, undertakes to:
Process personal data only for the specified, lawful purpose for which consent was obtained
Implement reasonable technical and organisational security safeguards
Notify the Data Protection Board and affected Data Principals in the event of a data breach
Erase personal data upon withdrawal of consent or upon the purpose being fulfilled, whichever is earlier
Ensure that Data Processors engaged by us are bound by equivalent data protection obligations
Not process personal data outside the purposes stated in this Policy without fresh consent
Maintain accuracy and completeness of personal data, and correct it on request
§ 13 Exemptions Applicable
Certain processing activities may be exempt from specific provisions of the DPDP Act under Section 17, including:
Processing necessary for the prevention, detection, investigation, or prosecution of offences under Indian law
Processing by courts or tribunals
Processing for the purposes of national security
Processing of personal data that is publicly available
We will invoke exemptions only to the minimum extent necessary and will document each invocation.
§ 14 Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or regulatory guidance. We will:
Update the "Last Updated" date at the top of this Policy
For material changes (changes to data types collected, new purposes, or new third-party sharing): notify active users via email and present a fresh consent notice as required under Section 6 of the DPDP Act
Maintain previous versions available on request
Continued use of the Website after notice of material changes constitutes acceptance of the updated Policy, where re-consent is not legally required.
This Privacy Policy is governed by the laws of India. Any disputes arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts at Rajanna Sircilla, Telangana, India.
Apply for
Fill in your details and we'll be in touch.
Cyber Intelligence Updates
Stay Ahead of Every Threat
Weekly threat intelligence, DPDP Act updates, and exclusive cybersecurity insights — delivered to your inbox.
Consent Notice — Privaxa Technologies Limited
Under the Digital Personal Data Protection Act, 2023, we need your informed consent before collecting any data. We use only essential functional cookies to operate this website. We collect personal data (name, email, organisation) only when you voluntarily submit a form, solely for the purpose stated at that point.
We do not use advertising, analytics, or tracking cookies. Read our full Privacy Policy & Consent Framework to understand exactly what we collect and why.
