How MANAS360 Is Built DPDP-Compliant by Design — From Day One

By Manas360 Expert ·

How MANAS360 Is Built DPDP-Compliant by Design — From Day One

How MANAS360 Is Built DPDP-Compliant by Design — From Day One

Short answer: MANAS360 was engineered to India's Digital Personal Data Protection (DPDP) Act 2023 standards from its first line of code — years ahead of the 13 May 2027 deadline. The reason is simple: our platform is designed so that we never permanently store your sensitive mental-health data. Data flows through MANAS360 to storage you control; it does not sit inside MANAS360. When you don't hold the data, you can't lose it — and that is the strongest privacy guarantee any mental-health platform can make.

Last updated: September 2026 · MANAS360

Is MANAS360 DPDP compliant?

MANAS360 is built compliant-by-design to the DPDP Act 2023 and DPDP Rules 2025, ahead of the 13 May 2027 enforcement deadline. Rather than bolt privacy on later, we made data minimisation the foundation of the architecture itself. Mental-health data is the most sensitive personal data a person has, so we designed the platform to touch as little of it as possible, for as short a time as possible, always under your consent.

How does MANAS360 protect my mental-health data?

MANAS360 uses an "Inbox" model — a secure gateway that receives, encrypts, and routes your data to storage you control, then deletes its temporary copy. In practice, that means:

  • We store metadata, never your medical content. Prescription IDs, timestamps, anonymized patient IDs, and encrypted links — yes. Your therapy notes, prescriptions, session recordings, and personal health information — no. Those live in your cloud (Google Drive, OneDrive, or a personal health vault), under your control.

  • Everything is encrypted with AES-256 in transit and at the gateway.

  • Temporary data self-destructs. After delivery, our temporary storage is purged automatically — routinely within 24 hours.

  • Every access is logged. A full audit trail records who accessed what, when.

How does this map to what the DPDP Act requires?

The Inbox model satisfies the core DPDP obligations structurally, not just on paper:

  • Data minimization & purpose limitation — we hold only the metadata needed to route and deliver care, nothing more.

  • Consent-first processing — data moves to any external destination only on your explicit consent, matching DPDP's consent-as-primary-basis rule.

  • Storage limitation — automatic purge of temporary data enforces retention limits by design.

  • Security safeguards — AES-256 encryption plus audit logging meet the Act's reasonable-security-safeguards duty.

  • Your rights as a Data Principal — access, correction, portability, and erasure are effectively built in, because you hold the source data in your own storage.

Why does the "we don't store it" model matter so much?

Because it removes the single biggest risk in digital mental health: a platform breach exposing thousands of people's most private records. Traditional platforms concentrate sensitive data on their own servers, turning themselves into a high-value target and carrying the full compliance and liability burden. MANAS360 inverts that. By keeping data with the patient and holding only anonymised references, we shrink the attack surface, reduce our regulatory exposure, and — most importantly — keep you in control of your own story.

What is MANAS360's role in my care?

MANAS360 is an aggregator platform that connects you to qualified, independent mental-health professionals — it does not provide clinical care directly. Our job is to make access, matching, and secure data-flow effortless, while the therapeutic relationship stays entirely between you and your chosen professional.

Frequently asked questions

Does MANAS360 store my therapy notes or prescriptions?
No. Your therapy notes, prescriptions, and session recordings are stored in your own cloud storage, which you control. MANAS360 keeps only anonymized metadata and an encrypted link.

Is my data encrypted?
Yes — MANAS360 uses AES-256 encryption in transit and at its secure gateway, with a full audit trail of every access.

Can I delete my data?
Yes. Because you hold the source data in your own storage, you can download, move, or delete it at any time — data portability and erasure are built into the model.

Is MANAS360 already fully DPDP compliant before May 2027?
MANAS360 is built compliant-by-design to DPDP Act 2023 standards from day one and is preparing ahead of the 13 May 2027 full-enforcement deadline, including alignment with Consent Manager provisions expected to go live around November 2026.

Is MANAS360 my healthcare provider?
No. MANAS360 is an aggregator that connects you to independent, qualified mental-health professionals; it does not deliver clinical care directly.

MANAS360 is a digital aggregator platform connecting users to independent, qualified mental-health professionals. It does not provide medical or clinical services directly. This page describes MANAS360's privacy-by-design approach and its preparation toward full DPDP Act 2023 compliance ahead of the 13 May 2027 deadline; it is not a certification of compliance.