We need to show regulators and customers that our data and AI use are under control.
AI governance and compliance
Consent, notice and data-request flows, AI disclosure and evidence tools that help you meet DPDP, GDPR and EU AI Act duties.
Last updated
We build the parts of your apps that show people how their data and AI are handled: consent, notices, data requests, AI disclosure and audit trails. India’s DPDP duties apply from 14 May 2027, and the EU AI Act chatbot disclosure rule has applied since 2 Aug 2026.
What we build
- Consent, notice and data-request flows for India’s DPDP Act and GDPR, including export and deletion.
- AI disclosure for chatbots and labels for AI-generated images and video, as the EU AI Act Article 50 requires.
- Audit trails and evidence tools, such as certifying claims through expert review with a tamper-evident ledger.
How we work
Step 1: Discover
2–3 weeks
We agree the problem, the people who will use the tool and how we will measure success. We look at your data and the systems the tool must work with.
You receive: A short scoping note with the plan, the risks and a price range.
Step 2: Pilot
6–10 weeks
We build a small working version for one task and test it with a small group of real users. A pilot, not a platform.
You receive: A working pilot and a written evaluation of what worked and what did not.
Step 3: Build
3–6 months
We turn the pilot into a production tool, with the integrations, access control, privacy notices and tests it needs.
You receive: The production tool, its documentation and a handover session.
Step 4: Run
Ongoing, by agreement
We host, monitor and improve the tool. We use the same health checks and support process that we use for our own applications.
You receive: Monitoring, support and regular updates. Support hours: Monday–Friday, 09:30–18:30 IST, excluding Indian public holidays, with urgent issues raised on the support ticket channel, and a monthly service report.
Price
Discover
Scope one use case with your team and your data.
USD 2,000–4,000
2–3 weeks
- Workshops with the people who do the work
- A review of the data and systems involved
- A written scope with risks and a pilot plan
Excludes taxes. A fixed price for one use case, agreed before work starts
Prices are indicative and shown with their currency code. We confirm the price in writing after a call.
Is this a fit?
A good fit if
- You run apps or websites that collect personal data from people in India, the EU or the UK.
- You use chatbots or AI-generated media and need to disclose it.
- You have a legal adviser who can review the final notices.
Not a fit if
- You need legal advice. We build the software; your legal adviser decides what the law requires.
- You want a certificate of compliance without changing how your apps work.
Questions buyers ask
Is this legal advice?
When do the DPDP duties start?
Does the EU AI Act apply to our chatbot?
Related work
Built and run for our group company REINSTE
REINSTE Connect: matching research labs with industry sponsors
Built and run for our group company Conwiz
EvidenceBridge: certifying product claims through expert review
Start a project
Tell us what you want to improve. A person reads every request. You get an indicative scope and price range, confirmed after a call.