Partner Programme

Deliver DPDPA compliance to your clients on TrustOS.

The TrustOS Partner Programme is for chartered accountants, company secretaries, advocates, and compliance consultants who advise clients on the Digital Personal Data Protection Act, 2023. Your firm creates and manages a workspace for each client on TrustOS and carries out the compliance work under its own client relationship.

Who it is for

For professional firms that advise clients on compliance.

Chartered accountant firms, company secretary firms, advocates, law firms, independent compliance consultants, and consultancies with an audit or risk practice already hold the client relationships where DPDPA work begins. The programme gives these firms a platform on which to carry out that work.

Each client sits in its own workspace, and your firm decides which colleagues work on which client, so each colleague is given access only to the clients they serve.

  • CA firms
  • CS firms
  • Advocates and law firms
  • Independent compliance consultants
  • Consultancies with an audit or risk practice
What partners receive

What your firm receives when it joins the programme.

Partner workspace

Create client workspaces, assign colleagues from your firm to each client, and follow the status of every client from one console.

Demo workspace

A workspace with sample data, available from the day your firm activates, for showing TrustOS to prospective clients.

Client workspaces by tier

Each client receives the modules for its tier, starting with consent, notices in 22 languages, and rights handling at Tier 1, and extending to impact assessments, third party risk, and verified evidence packs at Tier 3.

Report branding

Reports prepared for your clients carry your firm's name and logo alongside the TrustOS mark.

Delivery material

An integration playbook, a deployment checklist, a scoping questionnaire, and a one page summary your firm can share with clients.

Support from our team

Our team replies to partners within one working day, and within four working hours for production issues. For your first two client engagements, our compliance consultants also help with scoping and delivery.

Client data is hosted in India and belongs to the client, and your firm administers it on the client's behalf.

How it works

Five steps from registration to your first client.

  1. Register

    Complete your firm profile and verify your email address with a one time code.

  2. Activate

    Complete activation. Your partner workspace and demo workspace are ready once activation is confirmed.

  3. Certify

    Complete a short online assessment on TrustOS and the DPDPA, after which your firm can create workspaces for its clients.

  4. Add clients

    Choose each client's tier, and the client workspace is created as soon as activation for that client is confirmed.

  5. Deliver and renew

    Carry out the compliance work for each client on TrustOS, with each client workspace renewing once a year from the date it was created.

Client tiers

Each client's tier follows the size of its personal data environment.

Four counts decide a client's tier, and the highest count reached sets it. The tier is fixed when the client workspace is created and reviewed at each renewal, so a client that grows during the year moves to a higher tier at its next renewal.

Client tier limits for data principals, collection points, connected systems, and dashboard users
MeasureTier 1Tier 2Tier 3
Data Principals on recordUp to 25,00025,001 to 1,00,0001,00,001 to 5,00,000
Collection points, such as websites and appsUp to 2Up to 5Up to 12
Connected systemsUp to 2Up to 5Up to 10
Dashboard users at the clientUp to 3Up to 8Up to 20
Tier 1

Modules included

Consent lifecycle, notices in 22 languages, rights and grievance handling, Privacy Centre, and records of processing

Typical client

Clinics, single location retail and hospitality, small service firms, and professional practices

Tier 2

Modules included

The Tier 1 modules, with personal data discovery, data flow mapping, a vendor register, and the breach workflow

Typical client

Growing businesses, regional ecommerce, education providers, diagnostic chains, and multi branch firms

Tier 3

Modules included

The Tier 2 modules, with impact assessment workflows, third party risk management, evidence packs with cryptographic verification, an AI processing register, and multi entity administration

Typical client

Established businesses, non banking financial companies, insurance intermediaries, hospital groups, and digital platforms

Clients above Tier 3, and organisations notified as Significant Data Fiduciaries, are quoted individually.

Programme terms

The main terms, set out before your firm registers.

Partner appointments are non exclusive, and certification is required before your firm creates its first client workspace. Every client signs an End Client Licence Agreement, owns its data, and can export its records at any time.

If your firm leaves the programme, each client workspace continues until its renewal date, so no client loses access to its compliance records. Intellectual property in TrustOS remains with Code Colonies Private Limited, and the full terms are set out in the Partner Terms.

Questions

Questions firms ask before joining.

Is there a free trial?

The programme does not include a free trial. The demo workspace is available as soon as your firm activates, so you can show TrustOS to prospective clients from the first day.

Is a GSTIN required to register?

A GSTIN is optional at registration. If the firm is GST registered, add the GSTIN so it appears on the tax invoice. If the firm is not registered for GST, confirm that on the registration form. Missing a GSTIN is not treated as proof of non-registration.

What does certification involve?

Certification is a short online assessment covering TrustOS and the DPDPA, and your firm can retake it. It stays valid for twelve months from the date of passing.

What happens to our clients if our firm leaves the programme?

Each client workspace continues until its renewal date, so no client loses its records when a partner firm leaves. Every client can export its records at any time, both before and after your firm leaves.

Where is client data hosted?

Client data is hosted on servers located in India. The data belongs to the client, and your firm administers it on the client's behalf.

Getting started

Register your firm and activate your partner workspace.

Registration asks for your firm profile and a verified email address. If your firm would like to see the partner console before registering, our team can take you through it in a guided walkthrough.