deependra.in

Local time in MUMBAI · UTC+5:30 ·

A senior engineer for Indian product teams, on your clock, with Mumbai close enough to meet.

Indian founders and product teams with a consumer launch to scale, a media or publishing platform to keep fast, or a PHP system to modernise, all on the same clock as me.

Cities
Mumbai, Bengaluru
Work week
Monday to Friday
Invoices
INR
Language
English

01

What teams in India bring me

  1. A consumer launch is coming (a campaign, a sale, a public vote) and nobody has tested what happens when the traffic arrives all at once.

  2. Your media or publishing platform slows down exactly when a story takes off, and the newsroom can't stop publishing while it's fixed.

  3. Your product still runs on an ageing PHP codebase, an old framework or shared hosting, and every change takes longer and feels riskier than it should.

  4. India's data-protection law now has its Rules, and you need to know what your systems must change before the main duties begin.

02

Working with teams in Mumbai and Bengaluru

We share one clock: India Standard Time, UTC+5:30, with no daylight saving, so the shared window never moves. A stand-up at the start of your day, a review in the afternoon and a written update before it ends all fit inside the same working hours. In Mumbai, kick-offs and architecture workshops can happen in person when they're worth it; with teams elsewhere in India, including Bengaluru, we work on video and in writing.

Each city's 09:00–18:00 working day on the clock in Mumbai (UTC+5:30), in January and in July, so daylight saving is accounted for.

Shared hours with Mumbai and Bengaluru
CityIn JanuaryIn July
MumbaiUTC+5:3009:00–18:00The same
BengaluruUTC+5:3009:00–18:00The same

The rules that apply here: Digital Personal Data Protection Act, 2023 · Digital Personal Data Protection Rules, 2025 · CERT-In's directions of 28 April 2022

03

Contracts and invoicing in India

Invoices in rupees, monthly or per milestone, under a services agreement with your Indian entity, with intellectual property assigned to you on payment. Where I handle personal data on your behalf, the agreement includes the security terms the DPDP Rules expect between a business and its processor. Whether GST applies to the engagement, and how, is for your accountant to confirm.

Tax and legal treatment depends on your company and country: confirm it with your accountant or counsel.

04

Data protection and the rules that apply

Digital Personal Data Protection Act, 2023

Parliament enacted it on 11 August 2023, and the government brought it into force in phases from 13 November 2025: the provisions that set up the Data Protection Board straight away, the registration of consent managers one year later, and the duties on businesses (notice, consent, security, breach intimation and the rights of the people whose data you hold) eighteen months after that notification. Design for the full set now, so the last phase is a check rather than a project.

Source: MeitY: notification bringing the DPDP Act into force (G.S.R. 843(E))

Digital Personal Data Protection Rules, 2025

Published in the Gazette of India on 13 November 2025, with the same phases as the Act. The security rule names the engineering: encryption, masking or tokenisation of personal data, access control, logs and monitoring that can detect and investigate unauthorised access, backups for continued processing, logs and personal data kept for one year for that purpose, and a contract with every processor. A breach is reported to each affected person and to the Board without delay, with a detailed report to the Board within seventy-two hours.

Source: MeitY: Digital Personal Data Protection Rules, 2025 (G.S.R. 846(E))

CERT-In's directions of 28 April 2022

Issued under section 70B(6) of the Information Technology Act to service providers, intermediaries, data centres, body corporates and government organisations: report the listed cyber incidents to CERT-In within six hours of noticing them, keep the logs of all ICT systems securely within India for a rolling 180-day period, and synchronise system clocks with the NTP servers of NIC or NPL, or servers traceable to them. The engineering: central logging with that retention, one time source, and an incident runbook with CERT-In as a named step.

Source: CERT-In: directions under section 70B(6) of the IT Act, 2000

This is engineering guidance, not legal advice: confirm what applies to your business with your counsel.

05

Where teams in India usually start

  • Launch-day readiness

    Your biggest day shouldn't be your first real load test.

    Price
    Fixed price for readiness; on-call cover priced per day
    Timeline
    Best started well before the event

  • Web platforms and SaaS

    Custom web applications, APIs and integrations, built to be inherited.

    Price
    Fixed-scope quote after a discovery call
    Timeline
    Scoped per project, agreed before work starts

  • Legacy modernization

    Move an aging system to a modern stack without stopping the business.

    Price
    Fixed-price assessment, then a fixed quote per stage
    Timeline
    An assessment first, then migration in stages on a schedule agreed with you

  • Performance and Core Web Vitals audit

    Find out in five working days exactly why your application is slow, and what to fix first.

    Price
    Fixed price
    Timeline
    Agreed per project

06

Case studies behind this work

07

Questions from teams in India

Can we meet in person?

In Mumbai, yes, when a session is worth it, such as a kick-off or an architecture workshop. With teams elsewhere in India we work on video and in writing; we're on the same clock either way.

Do you invoice in rupees, and does GST apply?

I invoice in rupees to your Indian entity, monthly or per milestone. Whether GST applies to the engagement, and how, is a question for your accountant: confirm it before we sign.

Does the DPDP Act already apply to us?

Parts of it do. The Act and its Rules started in phases on 13 November 2025, and most of the duties on businesses begin eighteen months after that. I build for the full set now: notice and consent records, security safeguards, breach intimation and retention. Confirm what applies to your business with your counsel.

08

Related writing

09

Other markets