Privacy-First by Design, Compliant by Default
How BOB ORBIT meets India's DPDP 2026 requirements
What is DPDP 2026?
India's Digital Personal Data Protection Act requires user consent, purpose limitation, data minimization, right to erasure, and data localization. Penalties up to ₹250 Cr.
Aug 2023
Act passed
Mar 2026
Enforcement begins
₹250 Cr
Max penalty
Our 4 Pillars of Compliance
Data Clean Room
A secure processing environment where raw user data stays encrypted. Only behavioral patterns (tags) exit.
Platforms NEVER see: Names, emails, phone numbers. Only anonymous tag sets.
Differential Privacy
Adding statistical noise to prevent re-identification of individuals.
Accuracy: 97% (vs 100% without privacy). Privacy: 100% (cannot re-identify).
User Consent & Rights
Full transparency and control for users over their behavioral data.
Purpose limitation: Tags used for ad targeting only. Never sold to third parties.
Data Localization
All user data processed and stored within Indian borders.
All processing happens in India. Cross-border transfers blocked for user data.
Certifications & Audits
ISO 27001
Expected Q2 2026
SOC 2 Type II
Expected Q3 2026
DPDP Compliance Audit
Scheduled Apr 2026
Penetration Testing
Last: Jan 2026 ✓
Comparison to Competitors
| Measure | ShareChat | BOB ORBIT | ||
|---|---|---|---|---|
| Uses PII | ✓ Yes | ✓ Yes | ✓ Yes | ✕ No |
| Differential Privacy | ✕ No | ! Partial | ✕ No | ✓ Yes |
| Data Localization | ✕ No (Global) | ✕ No (Global) | ✓ Yes | ✓ Yes |
| User Can View Data | ! Limited | ! Limited | ✕ No | ✓ Full |
| DPDP 2026 Compliant | ✕ No | ✕ No | ! Unknown | ✓ Yes |
Transparency Report Q1 2026
2,400
User Opt-Outs
0.3% of 8M users
47
Tag Deletion Requests
Avg 18 hours to process
0
Data Breach Incidents
Zero since launch
12
Tags Disputed
All resolved via review
Questions About Privacy?
Our Data Protection Officer is available for any compliance inquiries