Transparency & DPDP
How AnrakLegal handles personal data under the Digital Personal Data Protection Act, 2023. Last updated: June 2026.
Your rights
You can access, correct, or erase your personal data, raise a grievance, or nominate someone to act for you. Manage all of this from your Data & Privacy page. We respond within the statutory window. If a concern is unresolved, you may complain to the Data Protection Board of India.
Grievance Officer: [to be published]
How we protect case data with AI
Personally identifiable information is automatically redacted from case documents before they are shared with any third-party AI model, by default. Redaction fails closed — if it has not completed, confidential content is withheld rather than disclosed.
Sub-processors
We use the following sub-processors to deliver the service:
| Sub-processor | Purpose | Data |
|---|---|---|
| OpenRouter + model vendors | AI features (chat, analysis, drafting) | Redacted case text by default |
| Modal | PII-detection (redaction) model | Document text to detect PII |
| Supabase | Database, authentication, file storage | Stored personal data |
| Microsoft Azure | Application hosting | Data in transit / compute |
| Deepgram / Sarvam | Speech-to-text (Court Mode) | Audio and transcripts |
| Composio | Connected apps (Gmail/Drive), when you connect them | Content you choose to import |
Cross-border: some sub-processors operate outside India. DPDP §16 permits transfers except to government-restricted countries; none are currently restricted.