Partners
ReversePath finds the gaps, orders the work and keeps the evidence. Closing many of those gaps needs a professional: a lawyer, a chartered accountant or company secretary, a security specialist or the agency that runs the client’s systems. Partners do that work. We do not replace them.
Who partners are
-
For CA and CS firms
Your clients already ask you about compliance, and many of their DPDP gaps sit in records you know well: payroll, registers, KYC, vendor contracts and retention periods set by tax and company law.
Where you fit
- Run the assessment with a client and use the gap register as the agenda for your engagement.
- Advise on retention periods, registers and statutory filings where the Act meets company and tax law.
- Review evidence for controls within your expertise, under your name, for a Verified Assessment.
-
For lawyers
The assessment finds gaps and organises the work; it does not give legal advice. Interpreting exemptions, drafting notices and contracts, and advising on a breach or an inquiry by the Board remain legal work.
Where you fit
- Draft and review notices, consent wording, processor terms and data-sharing agreements that the Remediation Register calls for.
- Advise on roles, exemptions and other laws that apply in a client’s sector.
- Review evidence for a Verified Assessment and put your name and qualification to what you accepted.
-
For cybersecurity firms
The Act’s highest penalty ceiling is for failing to take reasonable security safeguards, and the Rules set a floor for them. Many gaps the assessment finds need a security specialist to close and to test.
Where you fit
- Close security gaps: access control, logging, encryption, backups and incident response.
- Run the tests that turn a control from Implemented to Tested: access reviews, restore tests, penetration tests, breach rehearsals.
- Review security evidence for a Verified Assessment.
-
For IT and digital agencies
Agencies build and run the websites, apps, CRMs and marketing stacks where most consent and tracking gaps appear, and are often the client’s processor.
Where you fit
- Fix consent screens, cookie and pixel loading, unsubscribe flows and account deletion.
- Scope data collected by forms and apps to what the purpose needs.
- Put your own processor terms, sub-processors and access practices in order, so clients can answer for you.
The client runs the assessment
The result, gap register and evidence stay in the client’s account. You see them only if the client shares them or invites you.
Gaps become tasks
Each task names the control, the evidence needed and the law behind it, so the scope of your work is clear before it starts.
You do the professional work
Advice, drafting, testing or fixing. You agree scope and fees directly with the client; ReversePath takes no part in that contract.
Evidence closes the task
What you produce is attached to the control. If you are a qualified reviewer, a Verified Assessment records your name, qualification, date and scope against each control you accept.
Listed partners
We are not listing partners yet. Only professionals we have spoken to and whose qualifications we have seen will appear here, with their name, firm, city, languages and areas of work.
Apply to be listed
For CA and CS firms, lawyers, cybersecurity firms and IT or digital agencies who help organisations close DPDP gaps.
What we check
Your professional registration where your profession has one, a conversation about how you work, and a sample of similar work with client details removed.