The archive · AI & Models · Strategic decision · 2025
Redacto bets India's DPDP Act turns privacy compliance into a market; ₹12 crore seed
Founded in 2025 as India's DPDP Act moved from law to rules, Redacto sells AI-first privacy tooling to banks and NBFCs; PeerCapital led its ₹12 crore seed.
Redacto
What the business is
An AI-driven data privacy and governance platform for Indian enterprises: automated data discovery, consent management, vendor-risk checks, breach workflows and regulatory reporting.
Starting capital：₹12 crore (≈US$1.4M) seed round from PeerCapital and Antler India, with angel investors (October 2025)
How it started
Founded in 2025 by Amit Kumar (CEO) and Shashank Karincheti (CPO) in Bengaluru, Redacto was built on a published regulatory calendar: the DPDP Act passed in August 2023, draft rules went out for consultation in January 2025, and the final Rules were notified on 14 November 2025. The founders started selling before the finish line — payments firms and NBFCs signed up to prepare for the rules.
What happened
In October 2025 Redacto raised ₹12 crore led by PeerCapital and Antler India to deepen its AI layer, expand product and engineering teams, and scale adoption among banks, fintechs and insurers preparing for DPDP implementation. PeerCapital's managing partner called the moment a privacy inflection point and backed the founders for their cybersecurity and enterprise-technology experience.
How it ended up
Still early: Redacto is live with payments companies and NBFCs and in talks with banks, fintechs and insurers as the DPDP Rules' compliance obligations begin to bite.
Background
Redacto was founded in 2025 by Amit Kumar and Shashank Karincheti in Bengaluru to sell a platform that maps an Indian company's personal data, manages user consent, monitors vendor risk and produces the reports regulators will demand. Its pitch was built entirely on a law — the Digital Personal Data Protection Act, passed in August 2023 — and the rules that would turn it into enforceable obligations.
The timing was the product. India's draft DPDP rules went out for consultation in January 2025, drew 6,915 public inputs, and were notified in final form on 14 November 2025 — a public, dated compliance cliff for every company holding customer data. Redacto started selling in advance of it: payments companies and NBFCs became customers while still preparing, and in October 2025 the startup raised ₹12 crore (≈US$1.4M) from PeerCapital and Antler India to strengthen its AI, expand its product and engineering teams, and push into banks, fintechs and insurers.
Founders and investors agreed on the mechanism: regulation, not marketing, was generating demand. Co-founder and CEO Amit Kumar framed it as AI redefining data-privacy architecture; PeerCapital's managing partner called the shift 'an inflection point.' The bet is that DPDP compliance, once optional, becomes a budget line for every Indian enterprise — the same wedge the GDPR built for European privacy startups a decade earlier.
What has to be true
- Redacto bet on a calendar, not a trend: draft rules in January 2025 and final rules in November 2025 gave it a dated, verifiable demand event to sell against.
- It went after the regulated first — payments firms and NBFCs under direct supervisory pressure — instead of trying to sell privacy to every company at once.
- The wedge was workflow, not policy: data discovery, consent flows and vendor-risk scores fit how privacy officers actually work, avoiding the consultant's trap of adding documents.
- The payoff depends on enforcement: penalties, audits and consent infrastructure are only now materialising, so Redacto's first-mover story holds until the market matures.
What can be applied
A regulatory deadline is a free sales force: Redacto won customers before the DPDP rules existed. Build product and pitch against the published calendar, and you inherit the urgency the law creates.
Aftermath
As of early September 2026, Redacto is live and spending the October 2025 round: it serves payment companies and NBFCs, is in talks with banks, fintechs and insurers, and is expanding product and engineering teams. With the DPDP Rules now in force, the compliance budgets it sold into are real and being audited. Whether Redacto becomes India's default privacy layer depends on execution — proving its AI classifications stand up to audit and surviving competition from global governance platforms. No exit, no down round: an early bet on a market the regulator is still building.
Sources
- DPDP Rules, 2025 Notified — A Citizen-Centric Framework for Privacy Protection and Responsible Data Use
- Redacto raises Rs 12 Cr in seed round led by PeerCapital
- Redacto raises ₹12 crore seed funding led by PeerCapital and Antler India
- Redacto Raises ₹12 Crore to Build India's Privacy Infrastructure
spotted an error? The archive wants to know.
Your turn
You just read one. Describe what you are building, and see who is betting on the same thing.
Free account · 3 free questions · no card