# Sehmat

> DPDP consent management built only for India. Ask in the person's language, on paper or online, keep proof of every consent, and answer every right.

Key facts:
- Sehmat is a consent management platform for organisations (Data Fiduciaries) under India's Digital Personal Data Protection Act, 2023 and DPDP Rules, 2025. It is not a registered Consent Manager.
- It is made by Blue Pencil Strategies Private Limited (https://www.bluepencil.com), Mumbai, India, which also builds Tashi, Vayam and Lekha.
- Consent notices in English and all 22 Eighth Schedule languages, by link, QR code, website banner, SMS, WhatsApp, printed paper sheets and offline Android.
- Withdrawal, access, correction, erasure, grievances, nominees, breach notices, write-once evidence and a hash-chained audit log.
- Data is stored in data centres located in India.
- Pricing is quoted per organisation; there is no public price list. Contact: contact@bluepencil.com. Request access: https://prod.in.sehmat.com/signup.
- The full text of this site is at https://sehmat.com/llms-full.txt.

## Pages

- [Home](https://sehmat.com/): What Sehmat does, in one page
- [About Sehmat and Blue Pencil](https://sehmat.com/about/): Sehmat is made in Mumbai by Blue Pencil, the team behind Tashi, Vayam and Lekha, technology for social programs in India.
- [DPDP Act 2023 and Rules 2025, Explained Simply](https://sehmat.com/dpdp-act/): Key dates, duties and penalties under India's DPDP Act and Rules, with section numbers, and where Sehmat helps with each duty.
- [DPDP Compliance Checklist for 13 May 2027](https://sehmat.com/dpdp-readiness-checklist/): A free DPDP readiness checklist with 25 checks, each mapped to the section of the Act or the Rule it comes from. Tick off what you have done.
- [आपकी सहमति और आपके अधिकार](https://sehmat.com/hi/your-rights/): Sehmat का उपयोग करने वाले किसी संगठन को सहमति दी है? उसे देखें या वापस लें, अपना डेटा पाएँ, सुधारें या मिटवाएँ, शिकायत करें या अनुरोध की स्थिति देखें।
- [Pricing: What Your Plan Depends On](https://sehmat.com/pricing/): How Sehmat is priced, what every organisation gets, typical set-ups, and how to get a written quote from a person, usually within three working days.
- [Security and Data Protection](https://sehmat.com/security/): Where Sehmat keeps your data, how it is protected, who can reach it, and how to report a security problem or an accessibility issue.
- [Your Consent and Your Rights](https://sehmat.com/your-rights/): Gave consent to an organisation that uses Sehmat? See or withdraw it, get your data, correct or erase it, complain, or track a request.
- [Contact](https://sehmat.com/contact/): Pricing, demos and partnerships
- [Policies](https://sehmat.com/policies/): All policies in one place

## DPDP guides

- [DPDP Rules 2025: what starts when (and what to do before 13 May 2027)](https://sehmat.com/blog/dpdp-rules-2025-timeline/): The DPDP Rules 2025 start in three phases: 13 Nov 2025, 13 Nov 2026 and 13 May 2027. What each date means and how to use the time left.
- [What valid consent looks like under the DPDP Act](https://sehmat.com/blog/what-valid-consent-looks-like-under-dpdp/): Under the DPDP Act, consent must be free, specific, informed, unconditional and unambiguous, given by a clear action. A plain checklist.
- [Paper consent is still personal data under the DPDP Act](https://sehmat.com/blog/paper-consent-is-still-personal-data/): The DPDP Act covers data collected on paper and digitised later. What that means for field programs, NGOs, health camps and CSR work.
- [DPDP breach notification: telling people and the Board within 72 hours](https://sehmat.com/blog/dpdp-breach-notification-72-hours/): Rule 7 of the DPDP Rules: tell affected people and the Board without delay, and send a detailed report within 72 hours.
- [Children's data under DPDP: verifiable parental consent explained](https://sehmat.com/blog/childrens-data-verifiable-parental-consent/): Section 9 and Rule 10 explained: who counts as a child, how to verify a parent, DigiLocker tokens, Fourth Schedule exemptions and guardians.
- [Consent notices in 22 Indian languages: what the DPDP Act asks for](https://sehmat.com/blog/consent-notice-in-22-indian-languages/): The DPDP Act lets people read notices and consent requests in English or any of the 22 Eighth Schedule languages. The list, and how to translate well.

## Optional

- [AI Use Policy](https://sehmat.com/ai-use/): What AI does in Sehmat, where it runs in India, how people review its output, and the controls organisations have over it.
- [Cookies and Local Storage](https://sehmat.com/cookies/): The Sehmat website sets no cookies and uses no analytics or trackers. This page lists what is stored in your browser and why.
- [Grievance Redressal](https://sehmat.com/grievance/): How to raise a grievance about Sehmat or about consent collected through it, who handles it, and the 90-day timeline under DPDP Rule 14.
- [Privacy Policy](https://sehmat.com/privacy/): How Blue Pencil handles personal data for the Sehmat website and platform, as Data Fiduciary and as Data Processor under India's DPDP Act.
- [Service Providers and Data Processors](https://sehmat.com/service-providers/): The companies that process personal data for Sehmat, what each one does, when it is used and where it processes data.
- [Terms of Service](https://sehmat.com/terms/): The terms on which organisations use Sehmat, the DPDP consent management platform from Blue Pencil Strategies Private Limited.