MADE IN INDIA DPDP · GDPR · CCPA

Show the Data Protection Board what you did, and when.

Consent, data discovery, database monitoring and vendor risk for regulated Indian enterprises, from banks and insurers to NBFCs. Built for the DPDP Act, hosted in India or on your own server.

  • Hosted on AWS in Mumbai, or in your own cloud
  • Signed releases with an SBOM
  • Hash-chained audit trail
  • Notices in 23 languagesConsentसहमतिসম্মতিஒப்புதல்సమ్మతిसंमतीಸಮ್ಮತಿസമ്മതംસંમતિਸਹਿਮਤੀସମ୍ମତିرضامندی
Consent receiptc09d…31b7 · notice v4
Access requestDay 62 of 90
BreachCERT-In report due in 5h 12m
New to DPDP? India's data protection law in two minutes: who it covers, the key dates, the penalties. Read the basics Free 12-lesson course, with a certificate to share Glossary of terms

Start with the product your next audit will ask about.

Consent, Discovery (DSPM), Activity (DAM), Detection (DDR) and TPRM are sold separately. Each works alone.

See it working

One console. Every role.

app.foctta.com/consents Illustrative data
FOCTTA
Overview
Consents
Notices
Rights
Breach
Assessments
Discovery
Vendors
Training
Reports
Consent ledgerRetail business unit · all purposes
Export proof
Active consents1,24,806
Receipts today8,430
Withdrawn this month1,212
Languages served14
Data principalPurposeStatusNoticeLanguageReceipt
p_8a3f…c7d2Offers and updatesWithdrawnv4हिन्दीc09d…31b7
p_41b0…9e12Improve the serviceGrantedv4தமிழ்a7b3…f2e1
p_7c22…04aaCredit bureau sharingGrantedv4English4f1e…88c0
p_19de…b3f5Offers and updatesDeclinedv4বাংলা9c1d…2a7e
p_0e7a…6d19Location for fraud checksExpiringv3मराठी5b92…e0d4
p_c3f8…1a60Guardian consent (minor)Grantedv4ಕನ್ನಡe81c…7f33
Access requestRQ-2419 · s.11 Rights portal DPDP · 90 daysDay 62 Identity verified
CorrectionRQ-2433 · s.12 Email DPDP · 90 daysDay 71 Re-KYC routing
ErasureRQ-2440 · s.12 Rights portal DPDP · 90 daysDay 12 Awaiting approval
GrievanceGR-0318 · s.13 Complaint form DPDP · 90 daysDay 83 Escalated to DPO
NominationRQ-2451 · s.14 Rights portal DPDP · 90 daysDay 5 Both parties confirmed
GDPR accessRQ-2455 · Art. 15 Email GDPR · 30 daysDay 18 In progress
WhereWhatRecordsConsent coverage
crm.customersAadhaar numbers48,210 92%
s3://kyc-archivePAN card scans12,604 71%
\\fs01\hr\Salary slips3,118 100%
crm.studentsDates of birthChild9,402 38%
laptop · FIN-114Bank statements216 0%
sharepoint · SalesPhone numbers22,870 84%
Scanning 42 data stores Only masked metadata leaves your network.
VendorTierBandDPANext review
Cloud payments processorTier 1BActive14 Oct 2026
KYC verification providerTier 1AActive02 Dec 2026
SMS and WhatsApp gatewayTier 2BExpires in 30 days23 Oct 2026
Call centre partnerTier 1CMissingOverdue
Analytics SaaSTier 3AActive11 Jan 2027
Document storageTier 2AActive30 Nov 2026
Why band B
1Processes customer personal dataDPDP s.8(2)
2Stores data outside IndiaRBI Outsourcing 2025
3Encryption evidence verifiedISO 27001 A.8.24
Same inputs, same band. Second approver required.
86%completed
Overdue learners get a reminder automatically.
DPDPA fundamentals94%
Children's data, Section 988%
Breach response, Rule 781%
Handling rights requests77%
Consent done right64%
Certificate issued Ananya Rao Children's data, Section 9 · 92% Signed by your DPO Add to LinkedInVerify
Withdrawal applied on every server
Receipt issued · notice v4
Explore Consent
Free · 12 questions · 3 minutes

How ready are you for May 2027?

Question 3 of 12 · S.6(4) Is withdrawing as easy as giving consent?
YesPartlyNot yet

Three laws. Six sector overlays.

RBI 6h incident clock, DAKSHSEBI CSCRF 6h notice, 24h portalIRDAI 6h copy, record retentionCERT-In 6h reportingPMLA 5-year hold, no tipping offRPwD WCAG AA contrast check
The life of one consent

Every tap on the banner becomes a receipt, chained to the one before.

23
Languages
181
Industry packs
58
Assessment templates
346
Webhook events
6
Training courses
Android and Wear OSPilot · not on an app store yet

The DPO's day, on your wrist.

Pinned connection · device integrity checked