DPDP-compliant AI API

Handle AI workloads under India's DPDP Act

unoblox is built around India's privacy regime. Your account, API keys, audit logs, and billing all sit inside India—no foreign account to manage, no reliance on a foreign privacy framework for your own compliance story.

Where your data actually lives

When you send a prompt containing customer names, emails, or other business data to unoblox, your account and request logs stay within India's geographic boundaries, and we don't replicate or cache that data offshore. For unoblox's self-hosted models (Qwen, Llama, Gemma), inference itself also runs entirely on Indian GPUs. For proprietary models (GPT, Claude, DeepSeek), the request is logged and billed in India, then computed on that model's own provider—that provider's terms govern the inference step, same as if you'd called them directly. Under the DPDP Act, your organization stays accountable for every byte either way; unoblox keeps the parts it controls—keys, logs, billing—local.

Compliant-by-default setup

Requirement	unoblox	Typical foreign-hosted API
Account & billing residency	India	Outside India
Sub-processor transparency	Disclosed in account	Often opaque
Data export on demand	Yes, instant JSON	30–45 days, typical
Audit trail	Full request logs	Limited

Audit & documentation

Your DPDP compliance officer needs three things: proof of where your account and logs live, a Data Processing Addendum, and audit logs. unoblox provides all three—log in and download the DPA from Settings → Compliance. API logs are retained for 90 days by default, with timestamps, request/response hashes, and token usage, usable as evidence of due diligence.

Frequently asked questions

Q: Does unoblox sell my data to train models?

No. unoblox does not fine-tune its own systems on your prompts, and doesn't sell data to third parties.

Q: What about the models themselves (e.g., GPT, Claude, DeepSeek)?

You choose the model per request. Each upstream provider's own privacy terms apply to the inference step for that model; unoblox's job is to route your request securely and keep the account, keys, and billing on Indian systems. If a model's terms don't fit your workload, switch to another—including fully self-hosted options like Qwen or Llama.

Q: Are requests logged?

Yes, for 90 days by default, then purged. You can request earlier deletion via the API or dashboard.

Q: Is the Data Processing Addendum enforceable in Indian courts?

Yes. It's governed by Indian law and drafted to align with the DPDP Act, 2023 and the IT Act, 2000. Our legal terms are reviewed annually by counsel in Delhi.

Q: Do I need to notify regulators myself?

Usually not, if you're using unoblox purely as a processor—you remain the controller and should loop in your own DPO or legal team as you would for any vendor. If you're processing data on behalf of others, unoblox acts as your sub-processor.

Q: Can I audit your infrastructure?

On request, for enterprise customers. We share infrastructure documentation and can walk your compliance team through our setup. Contact sales@unoblox.ai.

Get started in rupees → https://unoblox.ai/sign-in