Blogs
Expert guides, research reports, and technical insights across cloud, AI, data, security, and enterprise infrastructure — from the S&M practice team.
DPDPA Compliance for LLM and RAG
As India's DPDPA moves toward full enforcement in May 2027, organisations mapping their data estate must not overlook vector databases, which have become core infrastructure for LLM and RAG workflows and now hold personal data like any other store. Contrary to popular belief, most RAG databases retain not just vectors but the plain-text chunks alongside them, so both must be removed when a deletion request arrives. The practical safeguard is metadata tagging, which lets you tie each chunk to a specific data principal, enabling targeted deletes and — crucially under DPDPA — proving that data was actually deleted. If you're building LLM + RAG for the Indian market, choose a metadata-capable vector database and revisit your data processor agreements with providers like AWS and Azure to confirm processor obligations are clearly owned.
Zero Trust Security: India’s Strategic Imperative for Digital Resilience
In an era where India’s digital economy is expanding at an unprecedented pace, the traditional ‘castle-and-moat’ approach to cybersecurity is proving dangerously inadequate. As organizations accelerate their digital transformation journeys—embracing cloud infrastructure, enabling hybrid workforces, and integrating sophisticated AI-driven solutions—the attack surface for cyber threats has expanded exponentially. The answer to this evolving challenge lies in a paradigm shift: Zero Trust Security.
India’s DPDP vs EU’s GDPR
This section compares India’s Digital Personal Data Protection Rules 2025 with the EU General Data Protection Regulation. It highlights the similarities, differences and practical implications for organizations operating across both regions.
Stay ahead
Get the latest expert guides and research from the S&M team delivered directly to your inbox.