Singhania & Co.
Since 1969Solicitors & AdvocatesInternational Legal Consultants
The AI-native
privacy department.
Inkstone builds and operates the privacy function through one AI-native system. You receive a working function, not another tool to manage.
ONE LIVING PRIVACY RECORD Kept up to date
Business contextPeople · systems · purposes · flows
ObligationsLaw · policies · decisions · owners
DecisionsControls · risk treatment · choices
Open workActions · reviews · implementation
Implementation stateSystems · processes · owners
EvidenceSources · changes · proof · status
AssessMap and prioritizeBuildSet ownership and controlsOperateRun work and keep evidence current
ISOAH
Indian School of Anti Hacking
CERT-In Empanelled Security AuditorAgarwal et al.
Integrity. Insight. Innovation.
Insolvency · Technology Law · Data PrivacyPersonal data runs across the business.
Responsibility is fragmented.
Three conditions create risk that a business cannot see or control as one system.
Fragmented ownership
Data, purpose and accountability sit in different places across the business.
Exposure accumulates
Legacy records, broad access and vendor sprawl compound risk over time.
Continuous change
New products, systems and AI agents create data flows faster than periodic reviews can track.
Teams
Marketing
More examples
- Product
- HR
- Finance
- Legal
Systems
CRM
More examples
- HRMS
- Support
- Analytics
- Data warehouse
Vendors
Cloud platforms
More examples
- SaaS tools
- Payment providers
- Processors
Entities
India entity
More examples
- Group businesses
- Joint ventures
- Shared services
Old records
Legacy systems
More examples
- Exports
- Orphaned files
- Unknown flows
New AI agents
Copilots
More examples
- Autonomous agents
- Model outputs
- Integrations
India's Digital Personal Data Protection Act, 2023 (DPDP Act) raises the operating standard.
The required standard is rising while the business changes faster.
DPDP Act raises the required operating standard.
Businesses in India must translate statutory duties into ownership, working processes, safeguards and evidence.
AI raises the rate and autonomy of change.
AI systems and agents create and act on data faster than periodic controls can keep current.
Convergence is the consequence.
More data, more actors and more automated decisions create exposure between reviews.
Privacy has to stay current as the business changes.
That is the function Inkstone builds and operates.
One living record connects business context, obligations, decisions, open work, implementation state and evidence.
ONE LIVING PRIVACY RECORD Kept up to date
Business contextPeople · systems · purposes · flows
ObligationsLaw · policies · decisions · owners
DecisionsControls · risk treatment · choices
Open workActions · reviews · implementation
Implementation stateSystems · processes · owners
EvidenceSources · changes · proof · status
Assess
Map and prioritize
Build
Set ownership and controls
Operate
Run work and keep evidence current
AssessMap data and systems
- Identify obligations and risks
- Prioritize gaps and actions
BuildSet policies and ownership
- Configure workflows and controls
- Embed changes across teams
OperateRun requests and reviews
- Monitor changes and exceptions
- Keep records and evidence current
Material decisions and unresolved exceptions go to expert judgment.
Built by data privacy practitioners and technology lawyers who have done the work.
Debarshi Mukherjee
Co-founder
Technology lawyer and privacy practitioner with more than a decade advising Indian and multinational businesses. He designs privacy and AI governance programmes across DPDP, GDPR, CCPA, PDPL and HIPAA, covering data mapping, policies and operating controls. He is CIPP/E certified.
Biswarup Ghosh
Co-founder
Technology lawyer and repeat founder with more than a decade advising Indian and US businesses, including General Counsel-level roles. He builds privacy and data-governance programmes across DPDP, GDPR, CCPA, PDPL and HIPAA, with experience in breach response, DSARs and enterprise implementation. He is CIPP/E and CIPM certified.
Sukrit Mukherjee
Co-founder
Engineer and former technology lawyer. As founding product manager at SigTuple, he helped ship India’s first AI-powered digital pathology platform into clinical use in a regulated environment. He later led products at Myntra and Zoomcar, from early deep-tech builds to platforms used at national scale.
Sukrit, Debarshi and Biswarup studied law together at IIT Kharagpur and founded Technology Counsel Foundation (TECOF), a nonprofit shaping legal education for an AI-native world through programmes with IIT Kharagpur, National Law Universities, the University of Delhi and St Xavier’s University, Kolkata; Tech Law Dialogues, India’s premier forum for actionable emerging-tech policy frameworks; and an INR 100K technology-policy research fellowship.
Looking for data privacy solutions for your business? Let's talk.
Choose the reason for your inquiry and tell us what you need.