Article

Compliance Blueprint for AI Startups and SMEs: DPDPA 2023 and DPDP Rules 2025

Tsaaro Consulting (India) · tsaaro.com

A startup-sized DPDP compliance checklist from an Indian privacy consultancy.

It answers 2 questions

  1. Can AI handle my privacy policy, terms of service, and data-protection compliance?
  2. Is it safe to send customer data to AI APIs, and what about privacy laws like India's DPDP Act?

Read with it

  1. The primary source: API data is not used for training by default, with retention controls explained. openai.com Guide Enterprise privacy at OpenAI OpenAI
  2. The developer-facing detail on what is stored, for how long, and how to reduce it. developers.openai.com Guide Data controls in the OpenAI platform OpenAI
  3. The policy to quote when a customer asks whether their data trains the model. openai.com Guide How your data is used to improve model performance OpenAI
  4. Anthropic's equivalent answer, including the commercial-products carve-out. privacy.claude.com Guide Is my data used for model training? (Anthropic Privacy Center) Anthropic
  5. Anthropic's own account of what its API keeps: your prompts and Claude's outputs are not retained by default, with zero data... platform.claude.com Guide API and data retention (Claude docs) Anthropic
  6. Where to pull compliance artifacts when an enterprise customer sends a security questionnaire. anthropic.com Guide Anthropic's Transparency Hub Anthropic
eChai Partner Brands The partnership →