Privacy operations
Privacy operations platform for Indian product teams
Privacy operations is the day-to-day work of handling consent, knowing where personal data lives, deleting it on request, and showing your work. This page is a plain-language map of that work and where Erasure fits.
What privacy operations means
Four jobs, repeated all the time:
- Collect consent with proof of what each person saw and chose.
- Keep an inventory of where personal data lives in your systems.
- Fulfil deletion requests across those systems, not just in one table.
- Export a record of what happened when someone asks.
Why it breaks without a platform
Most teams start with tools that cover one slice and fall apart at the rest:
- A banner captures a choice but keeps no proof and changes nothing downstream.
- A ticket tracker holds the request but never deletes a row.
- A homegrown script deletes one table but leaves no audit trail—and the person who wrote it eventually leaves.
What you actually need to operate
The pieces stack on each other: a notice and consent path with receipts, a map of the systems that hold subject data, a verified way to receive requests, work that runs against those systems, and evidence you can export. Miss one and the process has a hole.
How Erasure fits
Erasure is one account for the whole loop: collect consent with proof, map the systems you connect, run verified deletion jobs, and export evidence of what ran.
- Accord for notice, consent, receipts, and withdrawal.
- Data Maps and Systems so deletion is scoped, not guessed.
- Rights for verified request intake and durable deletion jobs.
- Evidence packages built from real events—not a staged PDF.
Read more
Significant Data Fiduciary Under DPDP: Are You One, and What Changes
The DPDP Act lets the government designate Significant Data Fiduciaries with extra duties: DPIAs, data audits, an India-based DPO. Here is what SDF status means in practice.
DPDP Compliance Checklist for Indian Startups (2026)
A practical, itemized DPDP compliance checklist for Indian product companies: notice, consent, data inventory, deletion workflows, evidence, and security safeguards.
DPDP Rules 2025 Explained: What Changed and What You Must Do
The DPDP Rules were notified on November 13, 2025 with a phased rollout. This breaks down notice, consent, security, breach reporting, and SDF obligations into engineering work.
DPDP Act 2023: The Complete Guide for Indian Product Companies
India's Digital Personal Data Protection Act is in force, with rules notified in November 2025 and penalties expected from May 2027. Here is what product teams actually need to do.
Docs
What this does not solve
Erasure is privacy infrastructure, not legal advice and not a compliance certification. It automates the operational work; your team still owns policies, contracts, and legal judgment.
Invite-only beta
Try it on your own stack
Erasure is invite-only in beta. Request an invite and we will walk you through the parts that matter for your product.