Can you handle DPDP + RBI tokenisation + GST + Karnataka eWaybill?

All four, on every Standard-tier build. DPDP (Digital Personal Data Protection Act 2023), India’s GDPR-equivalent. We implement explicit consent capture, purpose-limitation per data field, data-principal rights (access / correction / erasure / nomination), 72-hour breach notification to the Data Protection Board, and a DPO contact surface in privacy policy. Consent + DSAR automation is configured per store-view. RBI Card Tokenisation (CoFT) 2022+, no raw card PANs stored in your DB; only network-issued tokens (Visa / Mastercard / Rupay / Amex vaults). Razorpay-HQ proximity helps here, we wire the tokenisation flow correctly the first time. GST: CGST/SGST/IGST split per shipping address, RCM for unregistered suppliers, composition-scheme override for < ₹1.5 Cr turnover. Karnataka eWaybill: mandatory for inter-state shipments > ₹50,000 and intra-Karnataka shipments > ₹1,00,000 (Karnataka raised the intra-state threshold from ₹50k in 2024). We integrate with GSTN API directly or via ClearTax / TallyPrime. HSN: 6-digit code mandatory above ₹5 Cr turnover, 8-digit for exports. RBI data-residency: payment data stays in India (AWS Mumbai region, ap-south-1, ~30ms from Bengaluru).