Pay for what you actually use.
Free to explore. Scale as you grow. No hidden fees, no setup costs, no long-term lock-in. India-first, priced for your region.
Choose the right product for your needs.
Consent & Preferences
Build and manage consent notices, preference centers and data rights portals. Free forever for small operations.
Forever Free
For small businesses and point-solution users.
- 500 Active Data Principals/year
- Unlimited team members
- Notices, preferences, rights portal
Starter
Growing teams with active customer bases.
- 15,000 Active Data Principals/year
- Custom branding & domain
- API access & webhooks
Growth
Scale consent across products and domains.
- 150,000 Active Data Principals/year
- Connectors & integrations
- Multi-domain & 15 languages
Enterprise
Custom consent operations at scale.
- Unlimited ADP & SSO
- Audit logs, SLA & DPA
- Dedicated support
Compliance Platform
One platform for every framework - DPDP, ISO 27001, SOC 2, RBI, SEBI, CERT-In, GDPR, HIPAA and NIST. The free tier covers the India DPDP Act 2023; the wider catalogue is on the paid plans. Consent & Preferences included from Starter up.
Free Tier
Start mapping your compliance posture.
- DPDP Act 2023 (India) only
- 20 DPDP controls to start
- Consent & Preferences
- Evidence vault
Starter
Multi-framework compliance at scale.
- Up to 3 frameworks
- C&P included
- Cross-framework mapping
- Policy library
Growth
Scale multi-framework compliance.
- Everything in Starter
- Unlimited frameworks & CCF
- DPIA calendar & risk register
- Priority support
Enterprise
Complex obligations at scale.
- SSO / SAML
- API & custom integrations
- SLA & onsite training
- Dedicated support
What comes with every tier.
Email support
Every plan includes email support with response times scaled to your tier.
Online documentation
Complete guides, API docs, and how-tos for every feature - always kept current.
Security & compliance
SOC 2 certified, DPDP compliant, encrypted at rest and in transit. Data stays in India.
Software when you want it. Experts when you need them.
Professional services and capacity packs are separate from your plan - buy only what you need. All services are quoted to scope.
DPDP Implementation
Guided rollout per entity: configuration, frameworks, users, evidence, risk/vendor setup, training and handover.
DPDP Advisory
Legal and compliance advisory, gap assessments, notice and policy reviews mapped to the DPDP Act and Rules.
Managed Compliance
Our team runs the programme for you - monitoring, evidence, tasks and periodic reviews, on a monthly retainer.
Virtual DPO / DPO Support
A named Data Protection Officer function - grievance handling, DPIAs, breach response and board reporting.
Data Mapping
Discover and document personal data flows, systems and processors into a living RoPA.
Vendor Assessment
Third-party risk questionnaires, scoring and ongoing monitoring of your processors and sub-processors.
Compliance Training
Role-based awareness and DPDP training for employees, with completion tracking.
Custom Integrations
Connect NIYAM to your ERP, HRMS, CRM, data warehouse or bespoke systems via API, webhooks and connectors.
Additional Entities
Add subsidiaries, branches or group companies to an Enterprise plan - priced per entity, per year.
Additional Frameworks
Beyond your included frameworks - add ISO 27001, SOC 2, GDPR, NIST, sector frameworks and custom mappings.
VAPT & security testing
Standalone Vulnerability Assessment & Penetration Testing - scoped engagements, with remediation tracked inside NIYAM.
Third-Party Risk Management
Discover, assess, score and continuously monitor vendors and sub-processors - standalone or alongside your compliance programme.
Active Data Principal packs
Need more consent capacity without changing plan? Add packs of +50,000, +100,000 or +500,000 Active Data Principals.
How billing works.
Annual billing is our standard and saves ~15%. Monthly billing is available on Starter and Growth; Enterprise is quote-based. Switch anytime.
Yes - no long-term lock-in. You can cancel anytime, and we'll refund your unused balance on a pro-rata basis.
We'll notify you before you hit the limit. You can upgrade to a higher tier, or we can discuss a custom plan that fits your scale.
No setup fees on self-serve plans. Optional professional services (implementation, advisory, managed compliance, DPO) are quoted separately - see Add-ons above.
Yes - talk to our team about volume or commitment discounts. DPIIT-recognised startups also receive special pricing.
A person who has a live consent or preference decision recorded with you - not every visitor. Someone who never interacts with your consent experience is not counted, and a person who updates, re-gives or withdraws consent many times still counts once. If you later link an anonymous record to the same identified person, the two count as one. Your allowance is the number of new Active Data Principals in your allowance year; the figures on each plan card above are read live from our product catalogue, so they are always current.
No. The allowance shown on each plan is a yearly figure and it is the same whether you pay monthly or annually - paying monthly changes the payment schedule and the price, never the capacity. Your allowance year runs from the start of your subscription term, and it resets then. Unused allowance does not carry over into the next year.
Nothing breaks. Consent capture, withdrawal, preference changes and data-principal rights requests are never blocked by a commercial limit - that is a deliberate design rule in the product, not a case-by-case concession. We flag the overage and talk to you about the right plan or an Active Data Principal pack.
Ready to get started?
Consent & Preferences is free to start instantly, no credit card required. The Compliance Platform is demo-led - tell us about your organisation and we'll set up an evaluation.