CERT-In Cyber Security & Data Privacy Infrastructure for Indian Institutions

Automate 20 CERT-In Directives, 180-day log retention, and 6-hour incident reporting with hardware-attested evidence. DPDP-ready out of the box.

Get CERT-In Compliant →Free Compliance Audit →

Built for the engineer who has to integrate it, not just the officer who has to read it.

API-first, not portal-first

Integrate once, stop babysitting it

Deletion instructions go out over signed webhooks. Proof comes back over a public Erasure Attestation API — no dashboard login, no manual upload, authenticated with a scoped attestor key your vendors control.

Learn more →

Cryptographic non-repudiation

Every event, signed and chained

Ed25519 signatures rooted in TPM 2.0. A per-tenant SHA-256 hash chain. CERT-In incident submissions gated by OTP-verified Maker-Checker authorization. Nothing in the ledger can be edited, backdated, or repudiated after the fact.

Learn more →

Zero-touch enforcement

Controls that hold without a human

RBI-grade retention locks make early deletion structurally impossible. Consent expiry runs on a cron, not a reminder email. The moment a vendor attests erasure, the chain updates itself.

Learn more →

How the closed loop actually closes

One consent withdrawal, four cryptographic steps, zero manual follow-up.

Step 1

Withdrawal— A data principal withdraws consent inside Sanad or your own app.

Step 2

Signed webhook out— Sanad notifies every downstream vendor holding that data — HMAC-signed delivery, SSRF-hardened, automatic retry.

Step 3

Vendor attests— The vendor's system calls Sanad's public attestation endpoint with proof of deletion, authenticated by its own attestor key — never your tenant credentials.

Step 4

Immutable proof— Sanad signs the attestation with Ed25519, chains it into the tenant's ledger, and returns a public verify URL any auditor can check independently.

See the API

Provisional patents in DPDP & CERT-In compliance tech

100%

India-hosted · Supabase ap-south-1 · Vercel edge

TPM 2.0

Hardware-anchored Sentinel · EV-signed agent

SHA-256

Per-tenant hash chain · independently replayable

CIN: U85499HR2025PTC130446GSTIN: 06AAMCC6054B1ZWDPIIT Recognised StartupGovt of Haryana Cat-1 Funded

Ready to make compliance your competitive advantage?

Start with a free audit or talk to us about a pilot.

Get started →Email us