DPDP readiness assessment
BetaA free 15-question DPDP self-assessment on this site, and an evidence-based control assessment inside the product.
- ✓Free 15-question self-assessment with per-question statutory citations and guidance
- ✓Ten-control DPDP framework assessed against uploaded policy evidence
- ✓Per-control verdict — met, partial, gap, unknown — each with a recommendation
- ✓Gap-to-obligation remediation, so findings become dated tasks
What it is.
Two different things share this name, and they are worth telling apart. The free tool on this site is a 15-question self-assessment against the DPDP Act 2023 and the 2025 Rules, cited question by question — s.5, s.6, s.7, s.8, s.9, s.10, s.11, s.16, s.27, s.28, s.33 and Rules 4 and 13 among them. It runs in your browser and answers nothing to us.
Inside the product, DPDP is one of the frameworks in Audit Readiness: ten controls covering privacy notice, lawful basis, principal rights, consent management, grievance handling, s.8(5) safeguards, breach notification, retention, processor agreements and cross-border transfer, each assessed against policy documents you upload and returned as met, partial, gap or unknown with a recommendation. Gaps can be pushed into your obligations register as tracked remediation work.
Three steps.
End to end.
Fifteen questions with statutory citations and guidance, entirely in your browser. Good for finding out where you stand in ten minutes.
In the product, upload your actual policies and run the DPDP framework. Ten controls, each judged against what your documents say rather than what you tell us.
Push the gaps into your obligations register with due dates, so remediation is tracked rather than noted.
What you get.
- ✓Free 15-question self-assessment with per-question statutory citations and guidance
- ✓Ten-control DPDP framework assessed against uploaded policy evidence
- ✓Per-control verdict — met, partial, gap, unknown — each with a recommendation
- ✓Gap-to-obligation remediation, so findings become dated tasks
- ✓Breach assessment with the three DPDP clocks, including CERT-In's six hours, and a drafted principal notice and board report
Quick answers.
The assessment does not. The DPDP Compliance module does: it has a notice builder with versions and a public request and grievance portal. See DPDP Compliance.
No — it is a starting-point analysis. Have an advocate review before relying on it for a compliance attestation.
The quiz scores your own answers about your practices. The in-product assessment reads the documents you upload and judges the controls against them, which is a materially harder test and a more useful one.
More in Compliance & Deadlines.
Daily ingest of RBI and SEBI circulars into a searchable feed.
A researched catalogue of 53 Indian statutory deadlines, seeded into your calendar with recurrence rules.
Point at one regulatory change and see which of your contracts and obligations it actually hits.
Pull the obligations out of a contract, then actually track them — with reminders that fire, evidence, and a renewal pipeline.