Business Management & Data Protection Suites · by Prowessz Consulting

Eleven disconnected tools.
Becoming one.

Productivity, connected. Compliance, provable. A Business Management Suite that runs a growing Indian company end to end, and a Data Protection Suite that makes DPDP Act compliance something a hospital, factory, developer or institution can show, not just claim.

0live modules
0products, one platform
14-dayfree trial, sample data
DPDPcompliant by design
 Business Management Suite · Sales & tenders
Pipeline this quarter ₹4.2 Cr open
Enquiries received38
Quoted25
Negotiation / L113
Won → converted to orders8
  • ✓
    GeM bid 7421 — technical evaluation clearedDue 24 Sep · documents auto-attached from vendor file
  • ✓
    Quote Q-118 revised, margin 18 %Costed from live material rates
  • …
    Follow-up call · Apex EngineeringReminder Thu 11:00 · assigned to Rohan
 Business Management Suite · Management dashboard
Open orders by stage live
Cutting → Machining18 lines
Fabrication → Assembly11 lines
Inspection → Lab → TPI7 lines
Ready to dispatch4 lines
Receivables overdue₹3.4 L
GST invoices this month142
 Business Management Suite · Order SO-2041 · Precision Gears Pvt Ltd
Order to invoice on time
✓Enquiry✓Quote✓PO✓Production✓QC & lab✓Dispatch✓GST invoice₹Payment
  • ✓
    Material planned lean against stockHeat no. 7H-221 · 2 % scrap allowance
  • ✓
    Lab report & TPI certificate attachedAuto-linked to dispatch note
  • ✓
    e-Invoice + e-Way bill generatedIRN acknowledged · GSTR-1 ready
  • …
    Receivable due in 12 daysReminder scheduled · no retyping anywhere
 Data Protection Suite · Gap assessment
Readiness score
38 controls · 29 in place · 3 partial · trend ↑ 14 pts since June
Data map & RoPAin place
Notices in 2 languagesin place
Consent ledger · withdrawalsin place
Vendor DPAs signed4 of 6
DPIA — consultant reviewedapproved
 Data Protection Suite · Breach response · Rule 7
Report e-mailed to the wrong recipient 72-hr report · 41 h left
Board report clock31 h elapsed
  • ✓
    Breach detected & loggedIT confirmed · 2 people affected
  • ✓
    Affected people told "without delay"Rule 7(1) · SMS + call, 14:20
  • 3
    Board notified — full report within 72 hRule 7(2)(b) · draft ready from this record
  • 4
    Remedial measures & recurrence checkRule 6(1)(d)
  • 5
    Incident closed & logged for auditKept in the safeguards review trail
 Data Protection Suite · Overview · Regulatory clock
DPDP Rules, 2025 — phased commencement phase 1 in force
13 November 2026—days

Consent Manager registration opens · Rule 4, s.6(9)

13 May 2027—days

Substantive obligations in force · breach & rights clocks enforceable

Standard tier = compliant before the first date. Advanced keeps it true after the second.

Tender & CRM pipeline · quoted-to-won, GeM and private.
The product line

Two suites. One discipline: built with the client, then shipped.

Every acktvt product started as consulting work for a real Indian business, then became software the next client could switch on in weeks. Nothing on these pages is a roadmap.

Business Management Suite

One spine from customer PO to finished part — nothing falls between spreadsheets.

Built for a manufacturing client who ran on scattered Excel sheets: every order line, part, purchase, inspection and dispatch links back to the order it belongs to, with a full status history on every object. Tender-driven or repeat-order businesses alike.

Watch the explainer

See how one system runs the company, order to cash.

A short walk through the Business Management Suite — then open the live demo and click around a real deployment loaded with a sample company.

  • Tenders, sales orders and purchase on one traceability spine
  • Production, quality and dispatch tied to the order they belong to
  • GST invoicing, receivables and the management dashboard
Watch on YouTube
01
Master dataClients, vendors, parts, HSN/GST — editable by module admins, order-independent
02
Tender / Bid & CRM pipelineGeM and private tenders, quoted-to-won tracking, pre-tender pipeline stages
03
Sales ordersCustomer PO → work order → order lines with delivery periods, payment and deduction tracking
04
PurchaseRFQ → quotation → approval → vendor PO → receipt → inspection, with rework / replacement / return
05
Stores & inventoryLean material planning; RM, bought-out, WIP, finished and rejected stock never mixed
06
ProductionStock check → cutting → machining → fabrication → assembly → inspection → lab → TPI
07
QualityInternal inspection, external lab reports and third-party inspection tied to the part
08
Dispatch & accountsPartial dispatch, GST-compliant tax invoices with HSN-wise summary, payments and TDS/LD/SD deductions
09
Management dashboardMonthly review, delays, dues and pendency at a glance; e-mail alerts for what slips

Finance layer — management accounting

Cost centres and budgets, inventory valuation across warehouses, job costing, receivables and payables with cash-flow projection, approvals, TDS/GST registers and a Tally export bridge. The ledger and statutory filing stay with your CA — where they belong.

HR for up to 200 people

Employee master, lifecycle and documents with access control; shifts, attendance and overtime with biometric import; leave with approvals; self-service; statutory registers and payroll export — payroll as data preparation, never a black box.

Roles, security, deployment

Super Admin, module admins and users with module-level access; e-mail logins, captcha, 180-day password rotation; a Creator panel that toggles modules per deployment. Web on every browser, mobile view, and an Android app.

Get started with the Business Management Suite Open the live demo → The demo is a real deployment loaded with a sample company — look around before you talk to us. Offered as Prowessz-hosted SaaS or an outright licence. Every deployment is DPDP Act 2023 compliant.
Data Protection Suite

The DPDP Act as registers, workflows and evidence — sized for a mid-sized hospital, lab, plant, developer or institution.

Enterprise privacy tools assume a compliance team and an enterprise budget. acktvt gives a hospital, a lab, a manufacturer, a developer or a coaching institute the same substance — with a consultant who has done it before — and lets you try every module on sample data before anyone talks about a contract.

Watch · 74 seconds

The DPDP Act, what it asks of you — and how acktvt gets you there.

What the law is, why it exists, what non-compliance costs, and how the Data Protection Suite turns it into registers, clocks and evidence.

  • The six rights every person now has over their data
  • The dates: 13 Nov 2025, 13 Nov 2026 and 13 May 2027
  • Penalties of up to ₹250 crore — and the 72-hour and 90-day clocks
Watch on YouTube
13 NOV 2026Consent Manager registration opens
—days from today

Companies meeting the First Schedule may apply to the Board to be registered as Consent Managers. A person's right to give or withdraw consent through one arrives with the rest of the Act on 13 May 2027 — your notices and consent records need to exist by then.

Rule 4 · Section 6(9)
13 MAY 2027Every substantive obligation in force
—days from today

Itemised notices, security safeguards, breach intimation, retention, rights timelines and children's-data rules all become enforceable at once.

Rules 3, 6–8, 10, 13 · Sections 5–14
THE CLOCKS72 hours. 90 days.

Breach: affected people told without delay, full report to the Board within 72 hours. Rights requests and grievances: answered within 90 days — after that, the person may go to the Board.

Rule 7 · Sections 11–14 · Rule 14
UP TO ₹250 CRPenalty per instance

The maximum for failing reasonable security safeguards. The Board works as a digital office — complaints arrive online, and "did you know?" needs a written answer.

Schedule · Section 33
Standard — compliant
Data map & RoPAEvery processing activity, its purpose, basis and retention
NoticesItemised notices in English plus any Eighth-Schedule language
Consent ledgerConsent and withdrawal, provable per person, per purpose
Rights desk & privacy pageAccess, correction, erasure, nomination on a 90-day clock; hosted request page
Vendors & DPAsProcessor register with DPA status and data location
Security safeguardsThe Rule 6 minimums, each with evidence and a date
Breach responsePlaybook with the 72-hour Board report drafted from the record
Retention & erasureRules per record category and an append-only erasure log
Grievances & parental consent90-day grievance SLA; verifiable guardian consent, with Rule 12 exemptions recorded
Website & cookie scannerTrackers, cookies, forms and the notice on your public site — graded, with a fix for each finding
ABDM readiness · healthcareJoin ABDM without breaking DPDP — registries, vendor, milestones and a 14-point checklist
Lead-consent log · real estate, educationWhat each prospect or admission enquirer agreed to, which channel partner or counsellor holds the lead, and proof that a "stop" reached them
Child-data register · healthcare, educationEvery activity that touches a child under eighteen and the basis it rests on — verified parental consent or a Fourth Schedule exemption — with nothing advertised to a child
Advanced — continuous
Scored gap assessment35 controls plus your sector's own, auto-checked from the registers, with history
Reviews & remindersNothing goes stale — cadence per register, weekly digest
Policies & documentsVersioned from Prowessz templates, with acknowledgements
Staff training & undertakingsSessions, attendance, validity, signed undertakings
Shadow-IT discoverySweeps and staff reports of WhatsApp, drives and spreadsheets
Champion programmeThe Data Champion's first 90 days, step by step
Vendor questionnaires18 weighted questions on a no-login link, auto-scored
Immutable audit logEvery change, every export, kept 12 months or longer if your laws need it
Accreditation crosswalkYour DPDP evidence lined up against NABH (healthcare) or ISO/IEC 27001 Annex A (manufacturing, real estate) — one file for both auditors
Premium — assured, with Prowessz in the loop
DPIA with consultant reviewStructured assessment, scored risk register, mandatory Prowessz review, sign-off, annual re-check
Evidence packOne click: every register, the score and the reviews as a dated, printable bundle — no personal names
Regulatory watchCurated updates e-mailed on publish, acknowledged with a written trail
Multi-site groupsSwitch between hospitals, plants, projects or campuses; group dashboard, template registers, consolidated export
Prowessz servicesOutsourced privacy officer, quarterly health-check, breach on-call, annual drill and mock audit
Sector packs — same suite, your sector's language
Healthcare

Hospitals & diagnostic labs

Patients, UHIDs, OPD and IPD records, lab reports and TPAs — the registers speak the way a hospital works.

  • NABH crosswalk and ABDM readiness
  • Child-data register: the clinical exemption for care, verified parental consent for camps, photographs and the patient app
  • Hospital DPIA risks, drills and retention periods
  • A sample hospital to explore on day one
Manufacturing

Plants & manufacturing companies

Employees, contract workers, applicants, visitors, dealers and customers — and the data a plant really holds.

  • ISO/IEC 27001 Annex A crosswalk
  • Biometric attendance, CCTV, contract-labour and dealer-KYC risks
  • A sample components plant to explore on day one
Real estate

Developers & their channel partners

Prospects, site visitors, homebuyers, co-applicants and residents — and the leads that pass through dozens of brokers.

  • Lead-consent log: consent per channel, partners told when a prospect says stop
  • RERA-registered channel partners with their own data clause
  • A sample developer to explore on day one
Education

Schools, coaching institutes & colleges

Students under eighteen, parents and enquirers, faculty and the apps — where nearly every data subject is a child under the Act.

  • Child-data register: the Fourth Schedule exemption where it applies, verified parental consent where it doesn't
  • Enquiry-consent log for admissions and telecalling; the coaching guidelines, APAAR and CBSE items in the feed
  • A sample coaching institute to explore on day one
The platform underneath

Boring where it should be boring.

Both suites share the same foundation, so a client gets the same security posture, the same exports and the same support model whichever product they start with.

Tenant isolation in the database

Row-level security on every register; no application code can read across organisations. Verified by 440+ automated checks on every release.

Sign-in that holds up

Two-step verification for administrators, one session per user, password rotation, captcha, invitations locked to the invited address, and an audit trail of every export.

Your data, in your hands

Every register as CSV, the whole workspace as one open JSON file, quarterly backup reminders — and a clean, dated export when you leave.

Encrypted, backed up, exportable

Encryption in transit and at rest, managed daily backups, and a full export of every register you can take any time — your data never gets locked in.

Data Protection Suite tiers

Three tiers. Every module in every tier is live today.

Start on the trial, see what your organisation actually needs, and pick the tier with a consultant — the scope and the commercials are settled together in the data-mapping workshop, not on a web page.

Standard

Compliant — every DPDP obligation met, from day one

  • RoPA register, notices, consent & withdrawal ledger
  • Rights desk with a hosted privacy request page
  • Vendor/DPA register, retention & erasure log
  • Safeguards, breach workflow, 72-hour Board report
  • Grievances and parental consent
  • Website & cookie scanner; ABDM readiness for healthcare
  • Super Admin + 4 users · 1 site
For a single sitemeeting its baseline obligations

Premium

Assured — everything, with Prowessz in the loop

Everything in Advanced, plus
  • DPIA with mandatory consultant review
  • Audit-readiness evidence pack
  • Regulatory watch for your sector, acknowledged per site
  • Multi-site group layer
  • Privacy officer, health-checks, breach on-call, mock audit
  • Unlimited users · multi-site
Groups and assured programmesProwessz consultants in the loop, multi-site
Try it on sample data — free for 14 days No card, no commitment. Every module of the Standard tier is on from the first minute.
How an engagement runs

Consulting first, software second — live within weeks.

Map the real process

A working session — on site or remote — against your actual orders, vendors, processing activities and safeguards. It becomes your master data or your RoPA on day one.

Configure, hand over, train

Modules switched on for your deployment, registers and workflows configured, the team trained with sample data before their own goes in.

Stay supported

Annual subscription with reviews and reminders doing the nagging; Premium clients get a consultant's time on a schedule, not just when something breaks.

Next step

See it on your own data before you decide anything.

Start a free 14-day Data Protection Suite trial with sample data loaded, or book a 30-minute walkthrough of either suite with us.

Prowessz Consulting Services LLP · India · prowessz.com · acktvt@prowessz.com · WhatsApp +91 80802 55000