Skyflow launches data privacy vault platform to meet India’s DPDP Act demands amid rapid AI growth

Skyflow has unveiled a specialised Data Privacy Vault Platform designed to meet the rigorous technical requirements of India’s Digital Personal Data Protection (DPDP) Act, marking a strategic response to the nation’s evolving data privacy landscape. The DPDP Act, enacted in 2023 and supported by rules notified on November 13, 2025, signifies a pivotal shift in India towards a privacy-first digital economy. With enterprises facing an 18-month window to comply and potential penalties reaching ₹250 crore (approximately $30 million) per violation, the urgency for robust data protection infrastructure is pronounced.

India’s rapid digital transformation has generated unprecedented volumes of personal data across sectors, resulting in what industry experts term “personal data sprawl”, a diffusion of sensitive data through myriad repositories including app databases, analytics warehouses, SaaS tools, and AI training pipelines. Traditional security measures have struggled to contain and manage this dispersed data effectively. According to a 2024 survey by Protiviti and the Confederation of Indian Industry (CII), only 24% of Indian organisations felt prepared to confront the privacy challenges posed by emerging technologies, underscoring systemic vulnerabilities.

Skyflow’s platform addresses these challenges by isolating and protecting sensitive data within a centralised vault while maintaining secure data flows across disparate systems and AI workflows. It implements advanced privacy controls such as polymorphic encryption, format-preserving tokenization, masking, and obfuscation. These measures ensure that personal data remains secure throughout its lifecycle, yet usable for analytics and AI processes, aligning with the technical stipulations of the DPDP Rules, particularly rule 6, which governs data protection and lifecycle safeguards.

Beyond securing data, Skyflow’s solution empowers engineering teams with granular, purpose-aware governance capabilities and enforces retention policies compliant with the DPDP framework. It also generates immutable audit logs and consolidated reports to simplify regulatory reviews and supports enforcement of nuanced consent management and data principal rights. Critically, its entity-preserving tokens enable AI applications to function without exposing underlying personal data, facilitating privacy-first AI innovation.

Anshu Sharma, CEO and Co-founder of Skyflow, emphasised the scale and complexity of the challenge, noting, “India has 1.4 billion people and will soon have 1.4 trillion agents with AI. Protecting the personal data of 1.4 billion people requires purpose-built infrastructure and architecture, not incremental fixes.” He views the DPDP Act as a new benchmark for trust and accountability, positioning Skyflow’s platform as a key enabler for enterprises navigating compliance while harnessing AI capabilities safely.

The announcement has been welcomed by industry leaders. Murali Rao, Senior Partner and Leader of Cybersecurity Consulting at EY India, described the DPDP Rules as “a pivotal moment in India’s data privacy and governance landscape,” prompting organisations to adopt “privacy vaults and dynamic access controls” to safeguard personal data while enabling its accountable and transparent use. Corporate endorsements highlight the practical value of Skyflow’s technology: Ashutosh Sharma, GM Strategy and Product Ops at Urbanic, emphasised that the platform supports compliance with stringent security standards, while Rishikesh Bhise, Head of Policy and Governance at Dezerv, cited proactive integration of tokenisation to enhance investor trust and privacy beyond mere regulatory box-ticking.

India’s DPDP Act itself, enacted in 2023 and reflecting global data protection paradigms similar to the European Union’s GDPR, establishes a framework balancing individual rights with business needs. It introduces responsibilities for data fiduciaries, rights for data principals, and significant financial penalties for violations, aiming to build a transparent and accountable digital ecosystem. The recently implemented rules further tighten controls by restricting data collection to necessary purposes, mandating clear justifications, offering opt-out mechanisms, and requiring breach notifications, measures that directly impact the operations of global technology firms operating in India.

This intensive regulatory environment coincides with broader legislative reforms, such as the proposed 2025 Income Tax Bill that expands government access to digital and virtual assets for tax investigations, reflecting heightened scrutiny over digital data in multiple domains.

As Indian enterprises gear up to meet the DPDP compliance deadline, industry analysts suggest that those adopting comprehensive data privacy vault technologies like Skyflow’s will not only mitigate regulatory risks but also establish competitive advantages in the burgeoning AI-driven market. Effective data governance is increasingly seen as a cornerstone of customer trust and corporate excellence, critical to sustaining long-term value in India’s dynamic digital economy.

Skyflow’s claim to simplify and modernise personal data protection for the AI era positions it at the forefront of this transformation, trusted by both Fortune 500 companies and growth-stage firms across sectors such as financial services, healthcare, and retail. The company asserts that its Data Privacy Vault provides the foundational architecture essential for building a cryptographically resilient ecosystem that integrates privacy by design into data operations, a necessity in a country whose digital population and AI adoption are expanding exponentially.