We build the boring software that privacy and security teams quietly trust

For two decades, the standard approach to data privacy in India was to import a global tool, translate the labels, and hope the obligations would map cleanly onto the GDPR features it was actually built for. They never quite did. The terminology was wrong. The workflows were wrong. The escalation paths terminated at regulators that don't exist in India. The audit reports were calibrated to the Information Commissioner's Office in the United Kingdom, not the Data Protection Board of India.

When the DPDP Act was passed in 2023, the gap became obvious. The Act has its own vocabulary (Data Fiduciary, Data Principal, Significant Data Fiduciary, Consent Manager), its own structure (14 chapters, the 2025 Rules, sectoral guidance still emerging), and its own enforcement culture (complaint-driven, fast, sceptical of paper compliance). None of the imported tools fit. So we built DPDP Privacy Monitor.

The same story repeated in the SOC. Indian security teams were paying hyperscale prices for imported SIEMs sized for someone else's infrastructure, stitching twenty-three point tools together with dashboards, and answering CERT-In's 6-hour clock with platforms that had never heard of it. So we built Netgraph, a graph-native SIEM where SIEM, EDR, NDR, UEBA, SOAR, and an agentic AI SOC share one security knowledge graph, at a compute footprint an Indian mid-market SOC can actually run.

The team is small on purpose. Every feature in both platforms was either demanded by a customer with a real problem or hand-built by a practitioner who had done that work the painful way at a previous company. We don't build features for slideware. We build features for the operator at 7:42am on a Saturday when the breach alert fires.