DPDP

Your codebase is
not DPDP
compliant.

Anaya Scan reads your codebase - models, endpoints, data flows - and tells you exactly which DPDP sections you violate, which file, which line, and how to fix it.

Built in Mumbai by Sandip Pathe after seeing fintech teams grep their way through DPDP audits.

Free CLI. Runs locally. Source code and data stay on your machine.

Book a Call

This is a recorded terminal simulation of a real run on Saleor - a public Python e-commerce repo. The output below is what came out.

Models found
107
Fields found
994
PII fields
72
Plaintext PII
34
Sections failed
4

Your repo will produce different numbers.

Windows PowerShell

Compliance is an engineering problem.

DPDP §8 doesn't ask whether you have a policy.

It asks whether User.aadhaar_number is encrypted.

Vanta and OneTrust are GDPR-first tools. They have zero India-specific rules.

That's a code question. Anaya answers it.

₹25k

per day

What compliance consultants charge.

They produce Word documents.

0

lines of code read by Vanta or OneTrust

Zero code inspection. No DPDP.

No Indian regulation.

207s

one full Anaya run

Manual DPDP mapping takes 2-3 weeks.

₹250cr

per violation

Maximum DPDP penalty.

Enforcement: May 13, 2027.

A violation introduced today is a finding at your audit tomorrow.

The Anaya GitHub App runs on every pull request. A new plaintext PII field: PR fails. Missing consent check: PR fails. Non-compliant code does not reach production.

Early access. Backend on Azure. Marketplace launch targeted for 2026.

GITHUB CHECK
ANAYA
PR #842 opened · feat/add-kyc-model · base: mainanaya / dpdp-policy-check● FAILED§8(4) ENCRYPTION OF PERSONAL DATANON_COMPLIANTFindingKYCProfile.aadhaar_numberFileaccounts/models.py:188Rule pii-field-must-be-encryptedFix replace CharField with EncryptedCharField# Remediation pip install django-encrypted-model-fields aadhaar_number = EncryptedCharField(max_length=12)✗ Merge blocked · 1 Anaya check failing · resolve violation to proceed

Two tools. One job.

anaya compliance .$anaya compliance .⠴ Indexing codebase (AST + grep)… 107 models · 994 fields · 7 endpoints✗ §8(4)KYCProfile.aadhaar_numberCharField✗ §4no Consent model found▲ §7(3)no DELETE endpoint — User model✓ §9no children's data detected1 compliant· 2 partial· 4 non-compliant
Anaya CLI
pip install anaya and run anaya compliance . on any Python codebase. Full DPDP report in minutes. Source code and data stay local.
GHPR #842feat/add-kyc-model● failinglint / eslintpassed in 12stest / pytestpassed in 44sanaya / dpdp-policy-check§8(4) Encryption · KYCProfile.aadhaar_numberaccounts/models.py:188 — CharField → encrypt1 violation · merge blockedMerge blocked · resolve Anaya check to proceed
Anaya GitHub App
Runs on every pull request. New plaintext PII field: PR fails. Merge blocked until the DPDP violation is resolved.
.pymdl.dbLOCALEXECsource stays local
Source Stays Local
Anaya indexes locally. In LLM mode, only field names and model schema metadata are classified; --no-llm keeps the run fully local.

From scanner to compliance infrastructure.

Anaya is built as a product family, not a single utility. Start with a scan, keep monitoring in PRs, map where your PII lives, and generate docs when audit time arrives.

Scan

LIVE

DPDP CLI that runs in minutes.

Monitor

2026

Continuous compliance on every PR.

Map

2026

Visualize where your PII lives.

Docs

2026

Audit-ready evidence packs.

Four steps. No config. No YAML. No consultant.

Indexing happens locally, PII is mapped against the code structure, DPDP checks run section by section, and the final report gives you a file-level remediation path.

01 INDEX
02 MAP PII
03 ANALYZE
04 REPORT

FIG 1.0 - HOW ANAYA READS YOUR CODEBASE

Pay when your team needs it.

Developer

Free

For engineers who want to know what is in their codebase before someone else finds out.

  • +pip install anaya - full open source
  • +DPDP analysis across 6 sections
  • +Runs locally - zero telemetry
  • +PDF compliance report
  • +Python codebase support

Team

INR 8,000/month

For engineering teams who cannot afford to discover violations at audit time.

  • +Everything in Developer
  • +Anaya GitHub App with PR-level blocking
  • +CI/CD integration
  • +Team compliance dashboard
  • +JIRA and Linear ticket creation
  • +Audit-ready evidence package
Join Early Access

Enterprise

Custom

For fintechs preparing for NBFC or PA-PG licensing and formal DPDP audits.

  • +Everything in Team
  • +RBI and SEBI pack when available
  • +On-premise deployment
  • +Custom rule packs
  • +Regulator-ready compliance evidence package
  • +Dedicated support
Talk to us

Run it on your repo. See what comes out.

No signup. No consultant. Just `pip install anaya`.

Run it yourself in 90 seconds.

If you want help rolling it out, the 30-minute walkthrough is the secondary path.