About SAHAJ
SAHAJ (Simplified Architecture for Harmonized & Accountable Jurisprudence) is an **open-source Consent Management System designed for compliance with the Digital Personal Data Protection Act (DPDPA), 2023.
Developed by Concur – Consent Manager, SAHAJ aims to make privacy infrastructure as open, trusted, and widely adopted as India’s other digital public infrastructure efforts such as Aadhaar, UPI, and DigiLocker.
SAHAJ provides tools for organizations to:
- Collect consent in a transparent, auditable way.
- Manage consent lifecycle (grant, withdraw, modify).
- Demonstrate compliance to regulators and customers.
- Adopt Privacy by Design principles with minimal cost and friction.
🌏 Vision
India pioneered the idea of Digital Public Infrastructure (DPI) with identity (Aadhaar), payments (UPI), and public digital platforms (DigiLocker, ONDC). Each of these has transformed industries and empowered citizens.
Now it’s time for India to lead the Data Privacy Revolution.
SAHAJ envisions a world where every individual’s personal data is protected by default, and where businesses can comply with privacy laws without heavy costs or technical barriers.
SAHAJ is built to be:
- Foundational privacy infrastructure, just like Aadhaar is for identity and UPI is for payments.
- Global by design, usable beyond India, aligning with GDPR, CPRA, and future privacy laws.
- Open and transparent, so people can trust it as a neutral layer.
🎯 Mission
Build a Digital Public Good that helps organizations comply with Data Privacy laws.
Specifically:
- Help 1,00,000 businesses become DPDPA-compliant by 2027.
- Provide free and open-source consent management tools that any organization can adopt or extend.
- Reduce the compliance burden on startups and MSMEs while improving privacy for citizens.
- Create standardized, interoperable APIs for consent notices, withdrawal, audit, and reporting.
- Work closely with government, regulators, and civil society to ensure trust, transparency, and inclusion.
💡 Values
| Value | What It Means in Practice |
|---|---|
| Privacy by Design | Data minimization, encryption, secure storage, and user control built into every feature. |
| Transparency | Open source code, public documentation, and community-driven governance. |
| Inclusiveness | Designed for organizations of all sizes — from startups to large enterprises — and adaptable for multilingual, accessibility, and low-tech environments. |
| Interoperability | Open APIs and standards to integrate with existing systems, third-party platforms, and regulators’ frameworks. |
| Accountability | Strong audit trails, immutable logs, and clear responsibilities for data fiduciaries and processors. |
| User Empowerment | Simple interfaces for individuals to understand, grant, or withdraw consent at any time. |
| Global Outlook | While rooted in DPDPA, SAHAJ is adaptable to GDPR, CPRA, and other international data privacy laws. |
| Sustainability | Encouraging a community of contributors, transparent funding models, and long-term stewardship of the project. |
🙌 Contributors
SAHAJ is made possible through the support of organizations and individuals who believe in open source privacy infrastructure.
We’re grateful to everyone who contributes code, legal expertise, and community support.
🏢 Organizations
Concur – Consent Manager
- Website: https://www.concur.live
- Role: Project Maintainer & Core Developer
- Contribution: Original creators and maintainers of SAHAJ.
🤝 Individual Contributors
- Developers, designers, privacy professionals, and legal experts who contribute code, documentation, and testing.
- We recognize contributors via our GitHub Contributors page.
📫 Join Us
If you’d like to contribute to SAHAJ:
Thank you for helping build the world’s first open-source DPDPA compliance consent management system!
📫 Contact
For support, security issues, or partnership inquiries: