Data export, GDPR & DPDP tools
VipraGo builds privacy operations in: machine-readable exports, right-to-erasure anonymisation, and automated retention — aligned with the EU GDPR and India's DPDP Act.
Data export (Articles 15/20)
- Control Center → GDPR → Export: generate a complete machine-readable export of an individual's personal data.
- Organization-level exports cover payroll history, attendance, and audit logs for compliance reviews or migration.
Right to erasure (Article 17)
- GDPR → Erase User: anonymises an individual's personal data across all modules in one operation.
- Statutory accounting and payroll records are retained as required by law, with personal identifiers anonymised — the export shows exactly what was kept and why.
- Erasure operations are irreversible and themselves audit-logged.
Retention & purging
- Configure retention windows per data category; automated purge jobs enforce them on schedule.
- Purge runs are itemized in the audit log for evidence.
DPDP specifics
- Consent-aware processing and India data-residency options (Enterprise) support DPDP obligations for Indian employers.
- The same export/erasure tooling serves DPDP data-principal requests.
Tips
- Run a test export + erasure on a dummy employee during onboarding — your DPO sees exactly what the tooling produces before a real request arrives.
FAQ
- How fast can we fulfil an erasure request?
- Minutes — the operation is built-in, not a support ticket. Verify the requester, click Erase, archive the generated evidence log.
- Where is data stored?
- Google Cloud Platform; Enterprise plans can pin data residency to India or the EU. See the Security page for the full posture.