TSI Coop

TSI DPDP CMS is a self-hosted consent management system developed to meet MeitY's requirements and help data fiduciaries comply with the DPDP Act.

India's DPDP Act requires Data Fiduciaries to obtain purpose specific consents for collecting personal data from Data Principals. Inaddition they need to offer data principals the ability to withdraw consent, issue erasure request and facilitate grievance management. The act also specifies norms for managing children's data, data breach notifications etc.

TSI DPDP CMS, an apache 2 licensed open source software serves two categories of adopters: Data Fiduciaries, who can self-host the solution to manage consents of their data principals and Consent Managers, who can deploy it in multi-tenant mode to manage consent on behalf of one or more Data Fiduciaries.

We have proposed a Wallet solution for data principals to seamlessly manage consents across multiple fiduciaries there by reducing consent fatigue. We have also proposed a Standardized Erasure Protocol that guides the consent managers from different vendors to manage erasure requests in an uniform manner.

TSI Privacy Vault isolates personal and sensitive data from business applications in a hardened environment

Just as a physical safe secures valuable assets, TSI Privacy Vault isolates personal and sensitive data from business applications, including IDs, personal files, contracts, etc.

Key Features

• Three Data Flavours: IDs (ABHA ID, PAN, Voter ID), Personal Data (Name, Address, Medical Records), and Sensitive Files (Contracts, X-ray images)
• Encrypted Search Capability: Creates a Deterministic Blind Index. It enables text search without decrypting the underlying data.
• Utilities: Provides a utilities repository to manage API Keys, service credentials, and digital certificates.
• Legal Evidence: Every request to the vault is cryptographically anchored to a user and a device, creating an immutable audit trail.

The key benefits of the sovereign vault include reducing the breach surface, supporting DPDPA compliance by easily fulfilling erasure requests, and maintaining tamper-proof evidence for BSA Section 63.

TSI DX Node is an open-source decentralised B2B data exchange solution.

B2B data exchanges typically rely on SFTP, password-protected emails, or bespoke APIs that hard-code PII. None of these approaches makes it easy to enforce data governance policies.

TSI DX Node is a self-hosted node solution that runs at each business partner. The data travels peer-to-peer through an mTLS tunnel backed by a private PKI. Governance rules are defined in a contract layer (JSON schema), not in source code.

The contract layer enforces schema validity before data leaves the source. It also applies masking, hashing or tokenisation at the exchange layer. A contract inspector gives auditors a real-time view of the data governance enforcement.

Both synchronous and asynchronous data exchanges follow the same underlying single-package routing, replay protection, and forensic mirroring to improve robustness and security. We currently support CSV uploads and APIs with JSON payloads. Our roadmap includes support for standard data exchange formats such as FHIR and AS2 to serve multiple verticals.

TSI Ledger is an open-source, API-first double-entry accounting engine giving organisations a single, real-time source of financial truth.

Today, our enterprise systems are isolated. Sales systems, HR, and vendor portals maintain their own data models, leaving the financial entries fragmented. Someone exports the financial entries from these systems, or we run a batch job to push the entries into the financial accounting system.

Accounting teams care deeply about having a single source of financial truth across systems. They get rightfully frustrated when integrations break or when a new system launches without a native accounting integration. Now, we are entering an era where AI agents can autonomously approve vendor payments based on contract agreements, adjust payroll based on real-time performance, and execute settlements across sales channels on the fly.

Organisations will build fluid interfaces and workflows that cut across traditional software boundaries. They will need a single source of financial truth that accounting teams can access in real time.

Sales systems, HR platforms, or AI agents can post transactions directly through simple API endpoints. The system links each record to the previous one, creating a tamper-evident audit trail. It also returns an instant balance sheet or trial balance whenever you need one.

TSI Nexus is an open-source institutional intelligence platform that powers AI assistants

AI is rapidly changing frontend systems. We are shifting from linear flows with menus and forms to non-linear access, just asking by voice and getting things done. This is much more involved than dropping a chat window on top of existing software and looping LLM calls. We need the following capabilities:

• Connected View: every person, asset, and relationship in one place
• Memory Layer: every update recorded automatically
• Reasoning Engine: connects the dots and explains why
• Tunable Intelligence: learns each org's own terms and shorthand
• Integration Gateway: plugs into the CRMs, HR, and automation systems already in use
• Adaptable Interface: say or type it, no menus or forms
• Control & Audit Layer: checks actions against org rules, escalates to a human, reports for RBI/SEBI AI governance

For example: a credit operator says "disburse the loan for customer ID 4521," and Nexus confirms KYC, underwriting, and documentation are cleared before acting.

Zero sector-specific logic is hardcoded. Every domain concept, entity types, terminology, policies, commands, templates, lives in database rows configured by the deploying institution.

TSI Sign is an open-source document execution engine. Bring your own CCA-licensed CA for eSign.

TSI Sign generates documents from HTML templates, routes them for signature (a local organisation seal, or an Aadhaar eSign through whichever CCA-licensed CA you contract with), and records everything in a hash-chained audit trail. It is structured around Apps (e.g. a Loan App, an HRMS App) that each get their own API key, template namespace, and signer pool on one shared engine.

• Software is open, compliance is pluggable: PDF generation, signature placement, hashing, storage, and audit run in your own infrastructure under Apache 2.0. The CA is configuration, not a dependency: eMudhra, C-DAC, Protean, VSign, and others speak the same CCA eSign API.
• Only a SHA-256 hash leaves your network: built for DPDP and data localisation. Documents, names and other PII stay inside your own VPC. The CA receives just the hash of the bytes to be signed, never the document or its content.

Two ways to sign. A Corporate Seal is a server-side seal from an organisation-owned .p12 certificate (IT Act s.3). It proves a document came from your system and hasn't changed, which suits invoices, statements and purchase orders. Aadhaar eSign (IT Act s.3A) binds the signature to a verified individual through a CCA-licensed CA, which suits contracts, NDAs and loan agreements. The signer authenticates with Aadhaar OTP on the CA's site, and TSI Sign never sees the Aadhaar number.

TSI Compass is a beginner-friendly, self-hosted IT GRC and ITSM platform. It connects your compliance needs (policies, risk registers, controls, audits, incidents, and reports) directly to your helpdesk tickets, change requests, and asset inventory.

Many teams track risks in spreadsheets. They manage support tickets across random channels. Policies sit scattered in folders. And the next IT audit always brings dread. TSI Compass is built for exactly this problem.

It replaces ad-hoc tools with one structured environment. Your daily IT operations, like helpdesk, assets, and change requests, connect directly to your compliance framework, like policies, risk registers, controls, audits, and reporting. Everything sits behind a single, clean web console.

TSI Compass covers core GRC capabilities out of the box. This includes inherent versus residual risk matrices, ISO 27001 and SOC 2 aligned control attestations, executive dashboards, and one-click audit-ready exports.

It also delivers practical ITSM workflows. This includes a built-in helpdesk with one-click escalation to security incidents, an asset and vendor inventory with software license tracking, gated change management, and incident response with RCA.

TSI Ratings is an operational digital maturity diagnostic framework that tokenizes technical capability audits into verifiable, tamper-proof blockchain assets for financial credit underwriting pipelines.

Traditional credit underwriting relies on financial history: Credit Bureau scores, Account Aggregator data, GST filings. For MSMEs, this misses the operational picture: how digitally capable is the business, and is it built for the future?

TSI Ratings converts digital maturity into verifiable collateral that lenders can use alongside conventional financial data. An independent IT Auditor evaluates the business across five maturity levels (Nascent to Advanced), and the result is tokenized and anchored to the blockchain as a tamper-proof Digital Asset. A financial institution verifies authenticity by scanning a QR code on the report, receiving instant cryptographic proof the assessment has not been tampered with.