DPDP Act 2023 Compliance Statement

1. Ironclad as a Data Fiduciary

Under the Digital Personal Data Protection Act, 2023 ("DPDP Act"), Ironclad Licensing Private Limited acts as a Data Fiduciary for the personal data and corporate documents uploaded by our customers. We determine the purpose and means of data processing to execute business licensing filings.

Independent legal/tax professionals in our marketplace act as Data Processors on our behalf, restricted strictly to executing applications assigned by you.

2. Consent Architecture and Notice

In alignment with Section 6 of the DPDP Act, we ensure that:

• Consent requested is free, specific, informed, unconditional, and unambiguous.
• Every request for consent is accompanied by a clear, plain-language notice describing the exact personal data to be collected and the specific purpose of processing.
• You can withdraw your consent at any time. Upon withdrawal, we will cease processing and delete your personal data within 14 business days, except where retention is required by Indian law (such as tax audit laws).

3. Rights of the Data Principal

The DPDP Act empowers you with the following rights as a Data Principal:

• Right to Summary of Data: You can request a summary of the personal data being processed, processing activities, and identities of all Data Processors who have received your data.
• Right to Correction, Completion & Erasure: Request correction of misleading or outdated records, or complete erasure of files that are no longer necessary for the filing purpose.
• Right to Redress Grievances: Nominate a representative or file a grievance directly with our Data Protection Officer (DPO) regarding any concerns.

4. Local Data Residency and Security

To ensure compliance and maximize data security, all personal data, documents, and database servers are located strictly within the Republic of India (hosted in AWS Mumbai `ap-south-1` region via Supabase). No personal data is transferred or stored outside the geographical borders of India.

5. Grievance Officer Details

For any DPDP compliance queries, consent withdrawals, or data correction requests, please contact: