An AI-driven data privacy and governance platform for Indian enterprises: automated data discovery, consent management, vendor-risk checks, breach workflows and regulatory reporting.
The bet
That the DPDP Act would turn personal-data compliance from an afterthought into a must-buy for every Indian enterprise — and an AI-first platform could own that market.
₹12 crore (≈US$1.4M) seed round from PeerCapital and Antler India, with angel investors (October 2025)
Founded in 2025 by Amit Kumar (CEO) and Shashank Karincheti (CPO) in Bengaluru, Redacto was built on a published regulatory calendar: the DPDP Act passed in August 2023, draft rules went out for consultation in January 2025, and the final Rules were notified on 14 November 2025. The founders started selling before the finish line — payments firms and NBFCs signed up to prepare for the rules.
In October 2025 Redacto raised ₹12 crore led by PeerCapital and Antler India to deepen its AI layer, expand product and engineering teams, and scale adoption among banks, fintechs and insurers preparing for DPDP implementation. PeerCapital's managing partner called the moment a privacy inflection point and backed the founders for their cybersecurity and enterprise-technology experience.
Still early: Redacto is live with payments companies and NBFCs and in talks with banks, fintechs and insurers as the DPDP Rules' compliance obligations begin to bite.
Redacto bet on a calendar, not a trend: draft rules in January 2025 and final rules in November 2025 gave it a dated, verifiable demand event to sell against.
It went after the regulated first — payments firms and NBFCs under direct supervisory pressure — instead of trying to sell privacy to every company at once.
The wedge was workflow, not policy: data discovery, consent flows and vendor-risk scores fit how privacy officers actually work, avoiding the consultant's trap of adding documents.
The payoff depends on enforcement: penalties, audits and consent infrastructure are only now materialising, so Redacto's first-mover story holds until the market matures.
A regulatory deadline is a free sales force: Redacto won customers before the DPDP rules existed. Build product and pitch against the published calendar, and you inherit the urgency the law creates.
As of early September 2026, Redacto is live and spending the October 2025 round: it serves payment companies and NBFCs, is in talks with banks, fintechs and insurers, and is expanding product and engineering teams. With the DPDP Rules now in force, the compliance budgets it sold into are real and being audited. Whether Redacto becomes India's default privacy layer depends on execution — proving its AI classifications stand up to audit and surviving competition from global governance platforms. No exit, no down round: an early bet on a market the regulator is still building.
FOLLOW THE EVIDENCE
The sources
- DPDP Rules, 2025 Notified — A Citizen-Centric Framework for Privacy Protection and Responsible Data Use Press Information Bureau, Government of India · pib.gov.in ·
- Redacto raises Rs 12 Cr in seed round led by PeerCapital Entrackr · entrackr.com ·
- Redacto raises ₹12 crore seed funding led by PeerCapital and Antler India ET Enterprise AI, The Economic Times · enterpriseai.economictimes.indiatimes.com ·
- Redacto Raises ₹12 Crore to Build India's Privacy Infrastructure CIOL · ciol.com ·