DPDP and workplace AI
Turn DPDP into controls you can show.
Rule 6 of the DPDP Rules 2025 describes the controls NexusNest already ships for AI usage, shadow AI included.
DPDP and workplace AI
AI is now a data-protection surface. We control it.
The DPDP Act is technology-neutral. If personal data is processed or exposed through AI, the obligations still apply. NexusNest turns them into enforceable technical controls.
~May 2027
DPDP Rules 2025 in force
DPDP Rules 2025
₹250 cr
maximum penalty per breach
DPDP Act 2023
| DPDP Rules 2025 | What the rule asks for | NexusNest control | How |
|---|---|---|---|
| Rule 6(a) | “…masking or the use of a derived virtual token…” | PromptWall | Personal data is replaced with placeholders before it reaches the AI. |
| Rule 6(c) | “…logs, monitoring and review to ensure visibility…” | NetLens | Every AI interaction is visible, reviewable and reported. |
| Rule 6(e) | “…logs and retention of such data for one year…” | Audit trail | An exportable AI audit trail, ready for review. |
Rule 6(a)
“…masking or the use of a derived virtual token…”
Personal data is replaced with placeholders before it reaches the AI.
Rule 6(c)
“…logs, monitoring and review to ensure visibility…”
Every AI interaction is visible, reviewable and reported.
Rule 6(e)
“…logs and retention of such data for one year…”
An exportable AI audit trail, ready for review.
NexusNest provides the technical controls organisations need to operationalise DPDP compliance across employee AI usage. Overall compliance also depends on organisational, legal and operational measures.
Need more? We also offer DPDP readiness and AI governance advisory, backed by hands-on experience leading legal and compliance functions in European, GDPR-led businesses.
Trust
Private by design. Audited by others.
We built NexusNest to reduce the data you hold, not add to it.
Certified and tested
ISO/IEC 27001:2022
Certified information security management.
ISO 9001:2015
Certified quality management.
VAPT completed
Independent vulnerability assessment and penetration test.
Private by design
Only redacted text goes out
The AI tool receives placeholders in place of the original values.
AI providers see redacted text only
Placeholders go to the model. Real values never do.
Analytics on redacted text only
NetLens reports are built from redacted data, not raw prompts.
Start with one team. Prove control before you scale AI.
Start with one team. See exactly how your company uses AI.