Skip to Content
STATUTORY DPDP 2023 COMPLIANCE

Data Processing Addendum (DPA)

Governing India's Digital Personal Data Protection Act 2023 & Information Technology Act 2000

Data Fiduciary & Data Processor Obligations:Under this Addendum, the Customer acts as the Data Fiduciary (controller of student & faculty records), and VishwaDrishti operates as the authorized Data Processor. VishwaDrishti processes student candidate information strictly to deliver AI answer evaluations, mock test analytics, and administrative cohort reports.

1. Technical & Organizational Measures (TOMs)

  • Tenant Logical Partitioning: Every database query is scoped by organizationId at the application and ORM middleware level.
  • Encryption in-Transit & at-Rest: TLS 1.3 enforced on all endpoints; AES-256 equivalent cryptographic storage for student answer scans and evaluations.
  • Role-Based Access Control (RBAC): Granular permissions restricting faculty access strictly to assigned student batches and subjects.

2. Student Data Principal Rights

VishwaDrishti provides automated administrative toolsets enabling Data Fiduciaries to honor student rights under the DPDP Act 2023, including:

  • Right to Access: Exporting candidate diagnostic evaluation history and answer transcripts.
  • Right to Correction & Erasure: Complete cryptographic de-identification upon batch graduation or subscription termination.
  • Grievance Redressal: Designated Data Protection Officer (DPO) contactable at dpo@vishwadrishti.com.

3. Incident Response & Breach Notification

In the event of a verified security incident affecting Customer Personal Data, VishwaDrishti shall notify the Customer's designated IT Administrator within 24 hours of incident confirmation, accompanied by technical remediation reports.