Who this is for
- Product startups that need senior architecture and engineering leadership as they move from product-market fit to scale.
- Global capability centres building AI, data and platform teams for parent companies in the US, Europe or the Gulf.
- High-volume consumer and fintech platforms where reliability and cost per transaction decide margins.
- Investors backing Indian technology companies.
What shapes technology decisions in India
The Digital Personal Data Protection Act, 2023 is now being brought into force: the DPDP Rules were notified on 13 November 2025, with obligations phasing in over 18 months123. Consent-manager registration follows after a year, and most core duties for data fiduciaries apply from mid-20273. The engineering implication is consent and purpose tracking at the data level, retention that actually deletes, and breach detection you can evidence.
| Rule or standard | Who it touches | What it means for architecture |
|---|---|---|
| DPDP Act and Rules | Data fiduciaries processing digital personal data | Consent and notice records per purpose, retention and erasure jobs, breach detection and reporting |
| Consent managers | Platforms integrating registered consent managers | Interoperable consent APIs and audit trails |
| Customer and parent-company requirements | GCCs and exporters of software services | SOC 2, ISO 27001 and client security reviews built into delivery |
Related reading: idempotent payment pipelines, team topologies for AI teams and LLM model routing for cost.
Typical first projects
- A DPDP-ready data architecture: consent, purpose, retention and breach handling.
- Scaling a platform to very high volume with predictable latency and cost.
- Standing up an AI platform team in a global capability centre.
- Production RAG and agents with evaluation and cost control.
Time zones
I am based in India as well as the United States and the UAE, so Indian teams get my full working day. I also bridge Indian teams with US, European and Gulf stakeholders through clear written decisions and overlapping review slots.
How engagements work
- Architecture and AI readiness review (2 to 4 weeks): a clear picture of the current platform, risks and a prioritised roadmap.
- Fractional CTO (ongoing, part-time): technical strategy, architecture governance, hiring and board-level communication.
- Build and hand-off: hands-on delivery of a platform or AI capability, documented so your team can run it.
- Technical due diligence: an independent view of a target's technology for investors and acquirers.
Every engagement starts with a free 30-minute call. See how I work for the full process.
- 1India's Digital Personal Data Protection Act, 2023 brought into forceHogan Lovells · Nov 2025
- 2Update: India's digital personal data protection framework comes into effectAZB & Partners · Nov 2025
- 3