Software · Services · Free tools · Library
Consent and rights request software, security testing and certification work, and free tools, built on a library of the laws themselves. The library goes deepest on India.
Consent Managers
9days
Registration with the Data Protection Board opens on 13 Nov 2026.
UpcomingDPDP, every duty
Next190days
Notice, consent, security, breach intimation and rights apply from 13 May 2027.
UpcomingCERT-In
6hours
To report a cyber incident, from noticing it.
In forceArt. 33 GDPR
72hours
To tell the supervisory authority, from becoming aware.
In forceSoftware for the work privacy laws require: consent, rights requests, breaches and audits.
Rights requests
Access, correction, erasure and nomination requests in one queue, each on its own legal clock.
Consent
Consent notices and records that meet DPDP Rule 3, Art. 7 GDPR and CCPA opt-outs, with withdrawal as easy as giving.
Cookies and notices
A cookie and tracker banner that records consent per purpose, and privacy notices written from your data map.
Breach response
CERT-In's 6 hours, the 72 hours under DPDP and GDPR, and US state deadlines, in one workflow.
GRC
DPIAs and audits, processor and vendor records, and a compliance calendar, in one place.
For AI agents
The library served to AI agents and your own systems: sections, rules, terms and tracker entries, each with its citation.
Services · Security and GRC
Penetration testing, red teaming and application security, and the certification work for ISO 27001, 27701 and 42001, SOC 2, DPDP and GDPR. Delivered remotely from India, for clients anywhere.
No sign-up. Each tool answers one question and shows the clause behind the answer. For businesses, and for anyone whose data a business holds.
Free tool
If CERT-In, DPDP and GDPR all apply, these are the clocks that start when you notice a breach.
CERT-In
Next6hours
GDPR
72hours
DPDP
72hours
From 13 May 2027
What you can ask a company to do with your data under DPDP, GDPR and CCPA, and how long it has to answer.
The factors in s. 10(1), as questions, with what follows if the answer is yes.
Which Schedule penalties your gaps expose you to, item by item, up to Rs 250 crore.
DPDP Act and Rules: every remaining provision comes into force
around 31 Mar 2027SEBIBRSR Core assessment or assurance reaches the top 1,000 listed entities (FY 2026-27)
around 13 Nov 2026DPBRule 4 of the DPDP Rules 2025 and s. 6(9) of the Act take effect: Consent Manager registration opens
4 Nov 2026CERT-InArtificial Intelligence (AI) Security Auditing Guidelines (CISG-2026-04)
6 May 2026DPBAppointment to the posts of Chairperson and other Members in the Data Protection Board of India (F. No. 2(1)/2026-Pers.I)
26 Feb 2026CERT-InCyber Security Framework and Guidelines for Space including Satellite Communication (CISG-2026-01)
The laws themselves, section by section, mapped to the frameworks businesses answer to. Each page cites the regulator's own document.
Law · India
All 44 sections and the Schedule, with the Gazette text, a plain-English reading and the date each part applies.
Rules · India
All 30 rules and schedules, each linked to the sections of the Act it serves.
Frameworks
What each one is, who asks for it, how certification works and what it takes.
Compare
5 comparisons on the same criteria, with the article or section behind each cell.
Glossary
Data Fiduciary, Consent Manager, Statement of Applicability, Trust Services Criteria and more.
Tracker
MeitY, the Data Protection Board, CERT-In, SEBI, RBI and IRDAI, each linked to the document.
Weekly · Watching 6 regulators