DPDP is the Digital Personal Data Protect Act, the privacy law framework for India. Following the notification of DPDP Rules in November 2025, the year is defined by the operationalization of the Consent Manager ecosystem (expected between June and August 2026) and the beginning of the "soft enforcement" period where the Data Protection Board of India (DPBI) shifts toward active supervision. Key requirements for platforms include integration of Consent Manager API, Security and Breach Protocols, appointment of a Data Protection Officer (DPO) and so on. You can read more about it here.
Depends, but highly likely. If you have an AI based chat on your platform that connects to Chat GPT, Claude, etc, or are storing any data from your end users on your databases, you are definitely affected by the above laws, and you must ensure proper compliance in order to avoid penalties up to Rs 50 crore, or even prison time.
Yes. QShield is designed to do just that. We integrate seamlessly with your apps (pure javascript) and preprocess your users' queries to make sure any sensitive data isn't being fed to the AI. You can also use it to preprocess chats or anything you store in your databases to avoid the movement of sensitive user data altogether.
No. Redacting the sensitive data is one thing, but maintaining a cryptographically verifiable proof of each redaction is a different problem altogether. QShield does this, and marks each redaction with the timestamp and customer ID, so that in case someone claims that you were not compliant, you can fetch the exact immutable proof that you were. QShield is designed to do the compliance related heavy-lifting for you so you can focus on running your startup and getting more customers instead.
We use Kyber-1024 for key encapsulation, Fernet-like authenticated encryption, and proprietary decoy mechanisms — all performed client-side. These are used to generate a cryptographic signature for each action QShield takes, and we store these signatures. However, we do NOT store the original contents of the user query, their sensitive data, or anything that is non-compliant with DPDP laws.
No. You just need to apply for an API key from QuantumSure, and first direct the user query to it (after using the QuantumSure algorithm to encrypt it). We will make the security additions and deletions, re-encrypt the query and send it back to you. Then you decrypt it, and safely send it to your AI model API, without worrying about the compliance headache.
No — and that's by design. We never store your Master Password or recovery phrase. Keep them safe.
• Individual / Small Team: $5.99/mo – 1,000 encrypt requests
• Business: $12.99/mo – 15,000 encrypt requests
• Enterprise: $49.99/mo – 100,000 encrypt requests
Custom tiers available — contact us.
Start with the live demo on the Demo page. For advance application, reach out to qshieldapp@gmail.com.