The Architecture of Autonomous DPDPA Governance
How our PII Scanner executes client-side PII classification and anchors court-admissible evidence without exfiltrating customer data.
1. Executive Summary & The Problem of SaaS Scanners
Traditional privacy scanners create an acute architectural paradox: in order to discover where personal data resides, they require organizations to grant external cloud systems read access to production databases. This raw sampling transmits sensitive citizen data across the public internet, multiplying attack surfaces and violating Section 16 data sovereignty rules.
2. In-Memory Client-Side PII Scanner Architecture
DPDPA Shield introduces its automated PII Scanner architecture. Implemented as a zero-dependency Golang binary or in-browser WASM engine, the PII Scanner connects directly to internal PostgreSQL, MySQL, MongoDB, or object stores within the customer's private VPC.
3. Court-Admissible Proof: SHA-256 Ledger
Under Section 6(10) of DPDPA 2023, the legal burden of proof lies entirely on the Data Fiduciary. DPDPA Shield anchors every consent event, parental verification token, and DSR fulfillment receipt into a tamper-evident, append-only cryptographic ledger.