Capability roadmap
What you can adopt, and when.
Republished every quarter. A capability marked proposed is declared, not demonstrated — we do not report those as built.
Available now
PublicationSaaS + build
Social feedSaaS + build
Identitybuild
Tenancy — RLS forcedbuild
Audit — append-onlybuild
Feature flagsbuild
Next two quarters
LearningSaaS + build
Messaging & notificationSaaS + build
Document vaultbuild
Entity searchbuild
Reporting & exportbuild
Declared, not built
Entity Searchproposed
Customer Lifecycle Dataproposed
Reporting & Exportproposed
Outbound Webhooksproposed
Extensibilityproposed
…and 38 more43 total
Also on the drawing board
Designed and reviewed, not in the capability catalogue above — because there's no code yet to catalogue.
Legacy product migrationReads an existing repository's tree and commit history at one resolved commit, writes a cited baseline document, proposes a roadmap grounded only in what it actually read. Never invents architecture it didn't read.
Bring your own booksQuickBooks, Xero, Zoho Books, or a Tally bridge you run — never a Rathvan-built ledger. Balances, journals and the chart of accounts stay the system of record they already are.
Why this year
The buying window has a date on it.
| When | What changes | What it means for you |
|---|---|---|
| 14 Nov 2025 | DPDP Rules notified | An eighteen-month transition begins. |
| Nov 2026 | Soft enforcement ends | The Data Protection Board moves from awareness to supervision. |
| Q1 2027 | Significant Data Fiduciary duties | Independent audits, DPIAs, an India-based DPO, external auditors. |
| 13 May 2027 | Full enforcement | Penalties up to ₹250 crore for security-safeguard failures. |
DPDP permits cross-border transfer unless a country is notified, and none has been. The absolute residency mandates are sectoral — RBI for payment data, MeitY for government workloads, SEBI and IRDAI.
Not on this page yet: a build-vs-buy comparison for each row above. Coming later — not written yet.