We first identify the types of personal data your organisation collects, and how it is stored, processed, and shared. Then, we assess your existing data privacy policies, data retention policies, and incident response procedures for compliance with DPDP. This enables us to analyse the potential risks and vulnerabilities associated with your data handling practices.