Subscriber data, done right.
DPDP for subscriber lists, newsletter consent and one-click unsubscribe, GDPR for EU readers, editorial source protection. Every publisher obligation, one workspace. dcomply handles the re-consent workflow for lists imported from multiple tools, produces a DSAR portal that works for both DPDP and GDPR requests, and gives your editorial team a sensitive-source workflow with access controls and audit trail. Every email send stays on the right side of DPDP and the IT Rules 2021 grievance officer obligation.
If any of this sounds familiar, you're in the right place.
These are the exact sentences we hear on first calls. If two or three of them ring true, dcomply is the workspace you have been trying to build in a spreadsheet.
Your subscriber list has been imported from three different tools and consent status is a mystery.
Your newsletter unsubscribe link works but you have no audit trail.
You have EU readers and no DSAR process.
Editorial source data lives in reporter inboxes with no formal protection policy.
Your privacy policy hasn't been updated for DPDP.
If you sell reader subscriptions internationally, the SaaS door covers ISO 27001 + SOC 2 for enterprise-media buyers.
Here's what sits above the foundation.
Digital publishers, newsrooms, and newsletter platforms live under Indian regulators plus (for EU/US readers) foreign laws too. dcomply ships modules for each layer.
Four Pressures on Every Subscriber List
Newsletter Consent
Pre-DPDP lists with implicit opt-ins. Every send carries risk until consent is re-confirmed.
Withdrawal Anywhere
DPDP requires the same ease for unsubscribe as subscribe. One-click everywhere.
Editorial Source Protection
Journalist source confidentiality vs lawful access requests. Audit trail matters.
Ad & Analytics Vendors
GA, programmatic ad networks, ESP, CDN, every one needs a signed DPA and sub-processor entry.
Every Publishing Module. Pre-Wired
Newsletter Consent Capture
Double-opt-in form generator, version history, retention rules per list.
Consent Withdrawal
One-click unsubscribe link + WhatsApp + portal + email. SLA enforced.
DSR Portal
Reader right-to-access, correct, delete. Subscriber portal with token access.
Cross-Border Tracker
ESP servers, CDN locations, analytics tools outside India. DPDPB approvals.
GDPR for EU Readers
Article 28 DPA generator, lawful basis log per send, EU representative tracker.
Children Data
Age verification gate for any subscriber under 18. Parental consent for under-18 newsletters.
Vendor DPA Chain
Auto-tracked DPAs for ESP, analytics, ad networks, CDN. Sub-processor register.
Sub-Processor Disclosure
Reader-facing page listing every current sub-processor with locations.
Source Confidentiality Log
Encrypted source register, lawful access request log, retention overrides.
Send Audit Trail
Per-send proof of consent, timestamp, send list hash, GDPR lawful basis.
Phishing + Awareness
Editorial staff training tracking for ISO 27001 and SOC 2 if needed.
Evidence Locker
One vault: privacy policy, T&C versions, consent receipts, vendor DPAs, training records.
What dcomply Replaces
| Regulator / Framework | Why It Applies | dcomply Module |
|---|---|---|
| DPDP Act 2023 | Subscriber + reader personal data | Data Privacy pack |
| GDPR | EU readers / subscribers | GDPR Compliance module |
| CCPA | California readers (50K+) | CCPA module |
| CERT-In | Cyber incident reporting | CERT-In 6-hour intake |
| Press Council | Editorial standards (where applicable) | Custom regulatory alignment |
| POSH | 10+ employees | POSH IC + annual return |
Newsletter Lists Are Personal Data. Get a Virtual DPO.
Publishers with large opt-in lists hit Section 10 SDF criteria fast. DPDP Section 10 makes appointing a DPO mandatory.
dcomply vDPO bolts on from ₹2,499/mo. Standard tier adds a monthly human checkpoint. Premium gives you a dedicated advocate-DPO for editorial legal questions and DPB liaison.
See vDPO tiersAI for the daily work + monthly human checkpoint.
- Q&A with DPDP + GDPR citations
- Monthly DPO PDF report
- DSR auto-draft for subscribers
- Vendor DPA assistant (ESP, analytics)
- 30-min monthly consultation
Subscriber data + sources + ad tech. We map the lot.
CMS DB, S3 image library, Razorpay subscriber payments, ESP, source register. dcomply finds PII everywhere DPDP touches.
Questions editorial and digital heads actually ask.
"Handled in one screen."
"We had subscriber data across five tools with no consistent consent record. Six weeks later, one register, one DSAR portal, one purge schedule. The EU DSAR that showed up in month two was handled in one screen."
Start Free. Scale When You're Ready.
Pay-per-module from ₹1,499. Sector pack from ₹4,999. vDPO from ₹2,499.