Ready for India's DPDP Act and the EU AI Act before the dates that matter.
We help companies outside India and the EU work out which rules apply to them, what has to change, and in what order. Every requirement we state is cited to the official text.
India's DPDP Act, the EU AI Act and ISO/IEC 42001, for companies anywhere. Fixed fees, agreed before any work starts.
- DPDP Act 2023
- DPDP Rules 2025
- EU AI Act
- ISO/IEC 42001
- Article 50 transparency
- Annex III high-risk
- Consent managers
- AI management systems
The clock is already running
Updated as the rules change. Every date links to the official source.
Where today sits
- 13 Nov 2025DPDP Rules notified; Data Protection Board provisions in force MeitYIn force
- 2 Aug 2026EU AI Act transparency duties (Article 50) apply EUR-LexIn force
- 1 Nov 2026Today
- 13 Nov 2026Consent managers can register with the Data Protection Board MeitYin 12 days
- 13 May 2027Most DPDP duties apply: notice, consent, security, breach reporting, rights MeitYin 6 months
- 2 Dec 2027EU AI Act high-risk duties for Annex III systems, as amended by Regulation (EU) 2026/1744 EUR-Lexin 13 months
- 2 Aug 2028EU AI Act high-risk duties for AI in products covered by EU product law EUR-Lexin 21 months
days until consent managers can register with the Data Protection Board (India).
Readiness work, cited to the source
For companies with users in India or customers in the EU, wherever they are based.
DPDP readiness pack for companies serving users in India
Whether the Act applies to you, a cited gap analysis of what has to change, and a plan ordered by the dates each duty starts.
Usually about 7 working daysEU AI Act readiness assessment
Which of your AI systems the Act covers, the risk class of each, and the obligations and deadlines that follow from it.
Usually about 10 working daysISO/IEC 42001 gap assessment
Your AI management practices measured against ISO/IEC 42001, with the gaps to close before a certification audit.
Usually about 12 working daysMonthly regulatory monitoring
A short monthly note on new rules, guidance and enforcement that affect you, with what to do about each.
Monthly, cancel any timeWe describe our work as compliance assessment and readiness support; it is not a legal opinion on your particular situation.
How an engagement works
Tell us about your product
What it does, what personal data or AI it involves, and where your users are.
Get a fixed quote
We confirm which rules apply and send a scope and price before anything starts.
We assess
Each requirement is cited to the official text and checked three times, then reviewed and approved by our lead advisor.
You get the plan
A report you can hand to your board, with the work in the order the dates require.
Why Agent L exists
Compliance advice has a familiar shape. A long engagement letter, a team you never meet, a hundred-page report that arrives after the deadline it was meant to prepare you for, and an invoice nobody could have predicted. A founder with users in India or customers in Europe has three simple questions: does this law apply to us, what has to change, and by when. They rarely get simple answers.
Meanwhile the rules move faster than the reports. India's DPDP Rules come into force in phases over eighteen months. The EU AI Act was amended before its main duties even began. Advice that was right in spring can be out of date by autumn, and most companies find out only when a customer's security questionnaire, or a regulator, asks.
We think compliance work should feel like good engineering: precise, traceable and on time. So we built a practice that works the way the best software teams do. AI agents research, draft and cross-check around the clock. Every legal statement is tied to the official text it comes from, and checked against it three times. And a practising advocate reads and signs off every assessment before it reaches you.
Our aim is simple to say and hard to do: a five-person startup should understand its obligations in India and Europe as clearly as a multinational with a full legal department, with the cost agreed up front, and early enough to act. Clear answers, cited sources, and a plan in the order the dates demand. That is the whole idea behind Agent L.
In plain terms: our AI assistants prepare routine emails and say so when they send them. Every assessment, report, quote and invoice is reviewed and approved by our lead advisor before it reaches you.
Recent insights
DPDP Act Basics for US Startups with Users in IndiaDoes India's DPDP Act apply to a US startup? A plain-English guide to scope, main duties, start dates, transfers and penalty ceilings.
Good to know
Is this legal advice?
No. We provide compliance assessment and readiness support: which rules apply to your product, what they require, and a plan in the order the dates require. It is not a legal opinion on your particular situation.
Who does the work?
The research and drafting is done by AI agents, openly. Every regulatory claim is cited to the official text and checked three times: for facts, for citations against the source, and by an adversarial expert review. Our lead advisor then reviews and approves every report before it reaches you.
Which companies is this for?
Companies with users in India or customers in the EU, wherever they are based, that process personal data or build or use AI systems.
How is the fee set?
You get a fixed quote with the scope before any work starts. Nothing is charged that was not in the quote you accepted.
What happens to what I send through this site?
Only what you type in the form is collected, and only to answer you. This site sets no cookies and loads nothing from third parties. The privacy notice lists who processes it and your rights.
Ask a question
Tell us what you are building and where your users are. You will get a plain answer by email, or write to hello@agentl.in.
- Usually a reply within one working day
- A fixed quote before any work starts
- Only what you type here is collected