Know where you stand against every DPDP obligation — before the regulator asks.

You cannot defend a programme you have not baselined.

Without a documented baseline against DPDP obligations, remediation is guesswork and Board reporting is opinion. A regulator inquiry then arrives without an evidence trail.

DPDP Act 2023 places accountability on the Data Fiduciary — including demonstrating compliance on request (§8).

Spreadsheets do not survive contact with a real organisation.

A one-time assessment ages the day it is signed off. Owners change, systems change, obligations get reinterpreted. The register needs to be a living record, scoped by legal entity and business unit.

• Every DPDP section mapped to concrete controls, not narrative statements.
• Gaps assigned to a named owner with a target date and evidence type.
• Scoped by legal entity and business unit — not one flat organisation.
• Re-baseline on a cadence, with change-log against the last assessment.

From questionnaire to remediation plan in the same platform.

Assessment runs on the same data model as the rest of the platform. Gaps become tasks; tasks link to processing activities, systems and evidence.

1. 01
   Scope

   Pick the legal entities, business units and processing domains in scope.
2. 02
   Assess

   Answer DPDP section questions with attested evidence, not free text.
3. 03
   Score

   Per-section maturity score with gap classification and severity.
4. 04
   Assign

   Each gap becomes a task with owner, target date and evidence type.
5. 05
   Track

   Remediation progress visible on the compliance dashboard, aged and prioritised.
6. 06
   Re-baseline

   Quarterly refresh with change-log against the last assessment.

Evidence a Board or regulator will accept.

Every answer carries an owner, a timestamp and a link to the underlying artefact. Nothing is asserted without a source.

A programme the board can fund and the regulator can review.

Readiness is no longer a slide — it is a live register with owners, dates and evidence.

First baseline

10 days

DPDP sections covered

44

Refresh cadence

Quarterly