Your data, and the data of the people you serve, protected by design
Every Neodeus system encrypts personal data and business-sensitive data, where it is stored and while it travels, and gives each user access only to what their role allows. Encryption and access control are security safeguards named in Rule 6 of India’s Digital Personal Data Protection (DPDP) Rules, 2025.
Like a bank’s locker room
What we protect
| Kind of data | Examples | How it is protected |
|---|---|---|
| Personal data | Names, mobile numbers, addresses, ID and bank details of citizens, farmers, staff and customers | Encrypted where stored and while travelling (HTTPS) |
| Business-sensitive data | Rates, margins, ledgers, contracts | Encrypted where stored and while travelling (HTTPS) |
| Everything else | Masters, settings, documents | Role-based access; encrypted while travelling |
Who is responsible for what
Data Principal
The person the data is about, such as a citizen, student or farmer.
Data Fiduciary
The organisation that decides why and how the data is used: our customer.
Data Processor
A party that processes data on the fiduciary’s behalf. When we host a system, that is us.
Safeguards the DPDP Rules name, and how we meet them
| DPDP Rules, 2025 — Rule 6 | Neodeus systems |
|---|---|
| 6(a) Encryption, obfuscation, masking or virtual tokens | Personal and business-sensitive data encrypted where stored; all traffic encrypted in transit |
| 6(b) Control of access to computer resources | Role-based access: each user sees and does only what their role allows |
Source: Rule 6, DPDP Rules, 2025. The Rules were notified on 13 November 2025; most duties, including Rule 6, take effect 18 months later.
Questions
Is Neodeus “DPDP certified”?
There is no official DPDP certification. We build in the safeguards the Act and Rules describe, and help our customers meet their duties as Data Fiduciaries.
What happens to our data if we leave?
You get a full export in standard formats (Excel, CSV, PDF). After that, we delete your data within the period set in your agreement (default 90 days, configurable).
Tell us the problem you are trying to solve.
We will tell you honestly how we can help, or if we cannot.