Platform

One platform. Nine connected workflows. One evidence trail.

Binary AIQ is organised around how a Data Fiduciary actually operates: from identifying personal data through to reporting to the Board. Each workflow produces the record the next workflow requires.

Workflow

The compliance chain of custody.

Every workflow reads from the record produced upstream and produces the record needed downstream. There is one source of truth.

  1. 01
    Readiness Assessment

    Baseline the organisation against DPDP obligations, control gaps and evidence expectations.

    Evidence · Output: readiness score with per-section gap register
  2. 02
    Enterprise Inventory

    Register every system, application, vendor and data source under one owner-attested inventory.

    Evidence · Output: authoritative inventory scoped by legal entity and business unit
  3. 03
    Processing Activities

    Draft, review and approve RoPA records with lawful basis, retention and cross-border classification.

    Evidence · Output: versioned processing register aligned to DPDP Section 4
  4. 04
    Privacy Notices

    Generate notices from approved processing records; publish per surface, per language.

    Evidence · Output: notices with effective-from dates and revision history
  5. 05
    Consent

    Capture, store the receipt, honour withdrawal — with a lawful basis for every processing purpose.

    Evidence · Output: consent ledger and withdrawal evidence per data principal
  6. 06
    Data-Principal Rights

    Grievance intake, identity verification, workflow across systems, response under Section 13.

    Evidence · Output: closed DSRs with lineage and issued response letters
  7. 07
    Retention

    Enforce retention schedules by data category and lawful basis, with justified holds.

    Evidence · Output: retention runs with disposition evidence
  8. 08
    Incidents

    Detect, triage and notify under Section 8(6) — with a 72-hour clock and a Board template.

    Evidence · Output: incident file with notifications and remediation record
  9. 09
    Board & Regulator Reports

    Board pack, regulator response, internal audit — assembled from the underlying records.

    Evidence · Output: exportable, dated, signed by the accountable officer
What sits underneath

Enterprise foundations built into the platform.

Multi-tenant, scoped by entity

Workspace → Organization → Legal Entity → Business Unit → Location → Department → Team. Every record inherits scope.

Append-only audit log

Every read of a sensitive record and every write of a governed record is logged with actor, IP and impersonation context.

Role-based access control

Owner, admin, contributor, reviewer, auditor. Department-scoped members see their scope only.

Approvals and versioning

Processing activities, notices and retention schedules ship with review/approval and full version history.

Import and connect

Excel and CSV import live; Shopify, SAP, Microsoft 365, Google Workspace, Zoho and AWS on the connector roadmap.

Evidence linkage

Every artefact links back to a processing activity, an owner and an approval — nothing floats.