India data residency and the DPDP Act
The Digital Personal Data Protection Act 2023, along with guidance from RBI, SEBI and IRDAI, means more Indian companies need to show where personal data is stored and who processes it. 9live stores application data, databases and backups in India and provides the processor documentation you need.
Common problems
- On global clouds, data, backups and logs can end up in several regions, and the sub-processor list is long.
- Cross-border transfers need contractual safeguards that early-stage teams rarely have in place.
- Enterprise and regulated customers ask for residency, breach notification terms and a DPA in writing.
How 9live helps
- India by default
- Compute, databases and backups stay in India. Data leaves the country only if you add a non-Indian region on a Custom plan.
- Data Processing Agreement
- Published DPA with 72-hour breach notification and a short sub-processor list.
- Deletion and export
- Tools to export or delete records for a data principal, and documented backup expiry so deletions propagate.
- Encryption and access logging
- AES-256 at rest, TLS in transit, and an audit log of administrative access.
Suggested plan
Every plan keeps data in India. Grow adds a staging environment for testing deletion and export workflows. Regulated workloads often choose Scale for the uptime SLA.
12 vCPU · 32 GB · 320 GB NVMe · 2 managed databases
Questions
Does hosting with 9live make us DPDP compliant?
No hosting provider can do that on its own. You remain the data fiduciary. We cover the processor obligations: storage location, security safeguards, the processing contract and breach notification. Consent, purpose limitation and grievance handling are part of your application and processes.
Are backups also stored in India?
Yes. Off-host backup copies are stored in a second facility in India.
Can you sign our DPA instead of yours?
On Custom plans, yes, subject to review. Standard plans use our published DPA.
Talk to an engineer about your setup
Tell us what you run today and where it runs. We reply within one business day with a recommended plan and an estimate for the migration.