DPDP compliance,
your whole book
in one workspace.
The compliance OS for Indian CA firms. Onboard every SME mandate, draft RoPAs and DPIAs in minutes, and turn statutory work into recurring revenue — from a single ledger.
CA · Portfolio Ledger
FY 2026–27 · 24 clients
Avg score
76
Open
03
Drift
01
Arvind Textile Exports
TextilesTechFlow Solutions Pvt
SaaSMediCare Diagnostics
HealthSwara Foods Ltd
FMCGTrusted by partners at India's leading CA firms
Statutory deadline
DPDP Act 2023 · Enforcement 13 May 2027
Maximum penalty
Up to ₹250 Cr per breach
₹0 Cr
Max penalty per breach
DPDP Act 2023 § 33
0 min
Average SME onboarding
End-to-end inventory
0×
Typical advisory markup
Recurring monthly
0%
India-resident infra
Mumbai · ap-south-1
Six modules. One practice.
Every instrument a Chartered Accountant requires to deliver end-to-end DPDP advisory — composed under one roof, drafted in the language your clients already understand.
Portfolio compliance ledger
An aerial view of every client's score, drift and deadlines. Present a quarterly note to your partners in a single screen — see who's compliant, who's due, who needs you most.
CA · Portfolio Ledger
FY 2026–27 · 24 clients
Avg score
76
Open
03
Drift
01
Arvind Textile Exports
TextilesTechFlow Solutions Pvt
SaaSMediCare Diagnostics
HealthSwara Foods Ltd
FMCGConsent capture widget
A 15 KB drop-in script. Purpose-specific DPDP consent for your client's website with a tamper-evident audit trail and zero CMS plumbing.
arvindtextile.in
Your privacy choices
We use cookies for analytics and personalised marketing. Choose what you allow under DPDP Act 2023.
Data inventory & RoPA
A guided enquiry maps every data flow in under forty-five minutes and produces a professionally typeset Records of Processing ledger.
Records of Processing
Arvind Textile Exports
Audit Trail · Today
Tamper-evident ledger
Counter-signed DPIA
P. Khanna · 09:42:14 IST
Generated RoPA · v3
Norma · 09:38:01 IST
Submitted inventory
MediCare · 09:31:55 IST
Added mandate · Banyan
P. Khanna · 09:14:08 IST
Daily snapshot · sealed
Norma · 08:55:30 IST
Practice workspace & alerts
Delegate work to your team. Track alerts, view utilisation and surface billable activity — every mandate, every partner, one console.
Tenancy & authorisation
Every CA firm is a sealed tenant. Role-based access for partners, managers, staff and SME users — with row-level isolation at the database layer.
Tenancy · K.B. Khanna & Co
Roles & access
Senior Partner
All access
Manager
Mandate write
Associate
Inventory write
SME · Client
Self-data only
DPIA · Risk
Swara Foods Ltd
Impact assessments, guided
DPIAs step by step. Risk classified across four bands; a CA-signed assessment is rendered to PDF, ready for the board file.
Three steps from first mandate
to recurring revenue.
Norma was drafted with working practices in mind — not technology departments. Every step is guided, every form annotated, every output ready for the file.
Stand up your firm in minutes
Sign the practice agreement, configure roles and partners, and stand up your private workspace. The first invoice is yours; the recurring revenue follows.
- Firm profile & partners
- Team & role assignment
- Tenant provisioning
- Fourteen-day trial
Tenancy · K.B. Khanna & Co
Roles & access
Senior Partner
All access
Manager
Mandate write
Associate
Inventory write
SME · Client
Self-data only
Onboard a client in under 45 minutes
Add an SME client. They receive a discreet email, complete a guided data inventory, and the Records of Processing are drafted automatically — typeset, signed, and ready.
- Client onboarding email
- Guided data inventory
- Auto-rendered RoPA PDF
- Embedded consent widget
Records of Processing
Arvind Textile Exports
Sign, seal, and keep the record
Review DPIAs, counter-sign records, and issue the compliance opinion. Every artefact is timestamped, every signature audit-trailed, every May 2027 deadline answered.
- DPIA review & approval
- Compliance score tracked
- Signed PDF records
- Tamper-evident audit
Audit Trail · Today
Tamper-evident ledger
Counter-signed DPIA
P. Khanna · 09:42:14 IST
Generated RoPA · v3
Norma · 09:38:01 IST
Submitted inventory
MediCare · 09:31:55 IST
Added mandate · Banyan
P. Khanna · 09:14:08 IST
Daily snapshot · sealed
Norma · 08:55:30 IST
Practised by partners, trusted by their firms.
“We onboarded our first eight SME clients in a weekend. The auto-rendered RoPAs alone would have taken our team three months in Word. Norma turned advisory into a real practice line.”
Arjun Mehta
Senior Partner · Mehta & Co., Mumbai
“The partner sign-off workflow is what sold us. Nothing high-risk slips through without a signature, and we have a tamper-evident audit trail for every DPIA. Peace of mind for ₹9,999 a month.”
Rohini Pannalal
Practice Head · Pannalal Jain Associates
“Our clients see the compliance score, watch it climb, and understand exactly what they're paying for. We've never had this clarity in a recurring engagement before.”
Vikram Sundaram
Managing Partner · Sundaram CA, Bengaluru
Subscribe once. Bill at 2–3×.
Norma is priced for the practice — not the practitioner's client. You subscribe; you onward-bill at the markup customary to your firm. Statutory compliance becomes recurring revenue.
Subscribe to Starter at ₹4,999; onward-bill ten clients at ₹2,000 each — a net engagement margin of ₹15,001 per month, recurring.
Starter
10 mandatesFor small firms beginning their compliance practice.
- Up to 10 SME mandates
- Data inventory ledger
- RoPA PDF rendering
- Consent widget
- Basic DPIA generator
- Email correspondence
- Mumbai data residency
Growth
25 mandatesFor established practices with active SME books.
- Up to 25 SME mandates
- Everything in Starter
- Portfolio compliance ledger
- Priority correspondence
- Custom letterhead on PDFs
- Score & deadline tracking
- CSV exports & schedules
Professional
UnlimitedFor multi-partner firms with extensive client books.
- Unlimited SME mandates
- Everything in Growth
- Dedicated relationship partner
- Telephone support
- Service-level undertaking
- Early-access modules
- White-glove onboarding
14-day trial · No card required · Additional mandates at ₹299/month each · Annual invoicing on request
The Digital Personal Data Protection Act 2023 is India's first comprehensive data privacy statute. Any business processing personal data of Indian residents — a Data Fiduciary — must obtain specific consent, maintain processing records, conduct impact assessments for higher-risk activities, and respond to subject-rights requests. Penalties reach ₹250 crore per breach. Phase 2 of the Rules commences in November 2026 with full enforcement by 13 May 2027.
The deadline is 13 May 2027.
Your clients need you now.
Firms that begin now will lead the practice. Firms that wait will scramble. We're onboarding design-partner firms this quarter — your first client mandate is provisioned within the hour.
No card · 14-day trial · India-resident infrastructure