DRIP
DPDPA COMPLIANCE · ON-PREMISE
VAPT CLEAN v1.0.0

Data Risk Intelligence
Platform

DRIP scans every branch machine for personal data — Aadhaar, PAN, bank accounts, credit cards — and gives your CISO audit-grade evidence for DPDPA compliance.

Runs entirely on your server. Your data never leaves your network. Built specifically for Indian financial institutions.

Request a DemoInstitution Login ↗
PII Detection

Every Category of Personal Data

DRIP detects all personal data categories defined under DPDPA 2023 — across every file format on every branch machine.

Aadhaar NumberPAN CardPassport NumberDriving LicenceBank Account NumberIFSC CodeCredit / Debit Card (Luhn validated)Mobile Number (Indian format)Email AddressDate of BirthName + Identifier combinationsBiometric ID references
Three severity levels: High (direct identifiers) · Medium (combinable data) · Low (indirect data)
Deployment

Up and Running in Under an Hour

No cloud configuration. No complex enterprise setup. Just download, install, and DRIP starts scanning tonight.

01

Install DRIP Server

Run the installer on your central server. License key validates against our API. Takes ~5 minutes.

02

Deploy Agents

Install lightweight DRIP Agent on each branch machine via GPP/SCCM or manual install. No internet required after activation.

03

Automatic Scanning

DRIP scans all branch machines every night at 1:00 AM IST. Delta scans for efficiency — only changed files on subsequent runs.

04

Review Dashboard

Open DRIP Dashboard at http://server-ip:3001. Browse all PII findings by branch, severity, file type, or PII category.

05

Evidence & Reports

Retrieve files to Evidence Locker with chain of custody. Generate DPDPA compliance reports. Auto-push to your data warehouse.

Capabilities

Built for CISO-Grade Compliance

Every feature designed for the specific requirements of RBI-regulated institutions under DPDPA 2023.

🔍

PII Discovery Engine

Detects Aadhaar, PAN, passport, bank accounts, credit cards, mobile numbers, email addresses — across every file on every branch machine. Nightly scans at 1:00 AM IST.

🔒

Evidence Locker

Tamper-proof file retrieval with SHA256 hash verification. Chain of custody documentation for RBI inspections, DPDPA audits, and legal proceedings.

📦

Data Warehouse

Auto-push compliance data to your institution's DMS via SFTP, S3, or Webhook. Confirmation token system ensures no compliance data is ever lost silently.

📊

Compliance Reports

PII Discovery Report, Branch Summary, Scan Activity, Evidence Report — in PDF and CSV. Ready for regulatory submission or CISO review.

🛡️

VAPT-Clean Security

All 13 findings remediated before v1.0.0 release. bcrypt hashing, JWT blacklisting, brute force protection, security headers, encrypted storage at rest.

🏢

On-Premise Only

Your data never leaves your network. DRIP runs entirely on your server — no cloud dependency, no data residency concerns, full control for your IT team.

Regulatory Alignment

DPDPA 2023 — Section by Section

DRIP directly addresses the data discovery obligations that form the foundation of DPDPA compliance for financial institutions.

Section 4

Grounds for Processing

Discovers PII in unexpected locations — identifies data with no lawful basis

Section 8(3)

Data Retention

Flags files exceeding retention limits — generates disposal decision reports

Section 8(7)

Security Safeguards

Identifies PII in insecure locations — provides evidence for security audits

Section 11

Notice to Data Principals

Locates all files for any individual — supports right to access requests

Section 12

Right of Access

Chain of custody evidence packages with SHA256 verification

Section 13

Right to Erasure

Finds all PII locations — post-erasure delta scans verify deletion

Full DPDPA compliance mapping document available for CISO review. VAPT executive summary available on request. Contact suresh@gyaanpravaha.com
Pricing

Three Tiers. One Year. On-Premise.

Annual subscription. All tiers include Evidence Locker, compliance reports, and the full DRIP installer package.

Branch Starter
₹2.5L/year

Small co-operative banks, microfinance institutions, small NBFCs

Assets50 assets
Branches5 branches
Data WarehouseFile Download
SupportEmail (48hr)
Request Pricing
MOST POPULAR
Regional
₹7.5L/year

Mid-size NBFCs, urban co-operative banks, small private banks

Assets500 assets
Branches25 branches
Data WarehouseSFTP + S3 + Webhook
SupportEmail + Phone (24hr)
Request Pricing
Enterprise
₹20L/year

Large private banks, PSU banks, large NBFCs, SFBs

AssetsUnlimited
BranchesUnlimited
Data WarehouseAll modes + Direct DB
SupportDedicated account manager
Request Pricing
Add-ons
Extra 100 assets₹50K/year
Extra 10 branches₹75K/year
Custom report templates₹1L one-time
On-site VAPT report₹2L one-time
Architecture

Your Network. Your Data. Your Control.

DRIP Server installs on your central server. DRIP Agents install on branch machines. Everything communicates internally — no data ever leaves your network.

Available as on-premise installer (Windows, Linux, macOS) or AWS CloudFormation template for institutions already on AWS.

ARCHITECTURE
🏦 Financial Institution
├── 🖥️ DRIP Server (central)
│ ├── Dashboard :3001
│ ├── API :8000
│ └── PostgreSQL + Redis
├── 💻 Agent — Branch 1
├── 💻 Agent — Branch 2
└── 💻 Agent — Branch N
No internet access required after activation
DETECT · REPORT · INVESTIGATE · PROVE

Know Exactly What Personal Data Your Institution Holds.

Book a 30-minute demo. See DRIP scan a live server, generate a PII report, and retrieve evidence with full chain of custody.

Book a DemoEmail Directly ↗