Guides
Practical guides for engineering and compliance teams
The CERT-In 6-hour rule: a checklist for the first hours of an incident
What must be reported, to whom, and how to be ready before something goes wrong.
Read →5 min readDPDP Act: what your website's forms and notice need
The changes most Indian websites need on contact forms, newsletters, trackers and the privacy notice.
Read →4 min readServing EU and UK customers from India: where your data lives matters
Why your customers' contracts ask where data is stored, and what to do about replicas and backups.
Read →4 min readThe European Accessibility Act: what sellers outside the EU need to know
Since June 2025, online shops and many consumer services sold into the EU must be accessible, wherever the business is based.
Read →5 min readEmail marketing consent in India, the US, UK, EU and Australia
One customer list, five sets of rules: when you need consent, when an existing customer is enough, and what every email must include.
Read →5 min readDPDP Act checklist for clinic and hospital websites
Appointment forms, WhatsApp buttons and ad pixels: what a clinic's website needs to change before the DPDP duties apply.
Read →4 min readGeM tenders: EMD exemption and relaxations for MSEs and startups
Who doesn't pay bid security on GeM, what turnover and experience relaxation really means, and the mistakes that get bids rejected.
Read →4 min readSBOMs for Indian government and bank buyers: what they will ask for
CERT-In's SBOM guidelines list the fields buyers expect. Here's what to prepare before the request arrives.
Read →