The DPDP Act makes your hosting provider a Data Processor and keeps you accountable for what it does. See the deadlines, the hosting-side obligations, and the contract clauses to check.
Self-hosting n8n on a VPS removes per-execution pricing but adds ops work most guides skip. The real specs, the Docker setup, the encryption key trap, and when queue mode becomes necessary.
India's 72-hour breach clock starts when you become aware, not when you are breached. See the hour-by-hour response sequence, what the detailed report must contain, and the detection gaps that make the deadline impossible to meet.
Most Indian cookie banners fail DPDP because they notify rather than ask. See what consent must look like under the Rules, which plugins can do it, and how to configure one without breaking analytics.
Hosting and domains carry 18% GST, and registered businesses can claim it back as input tax credit. See the SAC codes, the invoice fields that decide whether your ITC survives scrutiny, and the reverse charge trap on foreign providers.
The first hour on a fresh Ubuntu VPS decides whether it survives. Ten hardening steps in order, from SSH keys and firewall to fail2ban, automatic updates, swap and monitoring, with the reasoning behind each.
