02 / Compliance AI
Run the programme,
keep the evidence.
Run your DPDP Act programme end to end. Daily RBI and SEBI ingest, regulatory impact on your own contracts, and obligations with reminders that fire.
DPDP Compliance — illustrative example
Breach — CERT-In report clock running
6 h
Request — Data Principal erasure request
open
Retention — Deletion job — certificate ready
done
RBI — New notification in the feed
today
Key facts
- ✓The DPDP Compliance module runs the Data Fiduciary programme — inventory, consent, Data Principal requests, breach clocks, retention, processors, DPIAs and audit packs.
- ✓RBI notifications and SEBI circulars are ingested daily; MCA/ROC and GST are not ingested today.
- ✓Contract obligations have a reminder job that fires on each obligation's own lead times. The statutory filing calendar does not send reminders.
- ✓Obligation reminders go by in-app, email, WhatsApp and push.
- ✓A regulatory change can be run against your contracts and obligations, returning what changed and what it affects, on request.
- ✓A free compliance deadline calendar lists recurring statutory due dates — GST returns, TDS deposits, and MCA/ROC filings — month by month.
- ✓Documents are stored in AWS Mumbai with server-side encryption and served over TLS.
What it covers
Privacy, regulators,
obligations, audits.
DPDP Compliance
Inventory, notices and consent, Data Principal requests and grievances, breach clocks, retention and deletion certificates, processors, DPIAs, transfers, audit packs
All four published plans
RBI & SEBI
RBI notifications and SEBI circulars ingested daily into a searchable feed, with impact runs against your own contracts and obligations
Daily ingest
Obligations
Obligations extracted from contracts, with reminders that fire, evidence on completion and a renewal pipeline
Reminders that fire
Audit readiness
SOC 2, DPDP and GST control frameworks assessed against the policies you upload, with gaps turned into dated obligations
Evidence-based
How it works
Run it. Evidence it.
01
Decide what applies
Run the DPDP applicability wizard; the obligation register and readiness calendar follow. Extract obligations from your contracts.
02
Keep the records
Inventory, consent, requests, incidents and processors as registers you own. RBI and SEBI items arrive daily in the feed.
03
Act and evidence
Work requests and breaches against their clocks, run impact analysis on a change, and export audit packs with the evidence linked.
Run your privacy programme
in one place.
DPDP, regulator feeds, obligations and audits — with the evidence kept.
Get started →Questions
Frequently asked questions
What does Compliance AI do?
It runs your DPDP Act programme as a Data Fiduciary, ingests RBI and SEBI publications daily, reads a regulatory change against your own contracts and obligations on request, and assesses your policies against SOC 2, DPDP and GST control frameworks. Contract obligations carry reminders that fire.
Which regulators does it monitor?
RBI and SEBI are ingested daily. MCA/ROC and GST/CBIC are not ingested today. The filing calendar lists 53 statutory deadlines across eleven regulators, but it does not send reminders.
What does the DPDP module cover?
Applicability and an obligation register, data inventory and AI discovery, processing and purpose registers, notices and consent including guardian consent, a Data Principal request and grievance portal, breach response with CERT-In and Rule 7 clocks, retention and deletion certificates, processors and DPA review, DPIAs, cross-border transfers, gap assessment, audit packs and a regulatory change monitor. It is on all four published plans.
Will it certify that we are compliant?
No. A compliant status needs linked evidence and a person's approval, and it is never computed from a score alone. Have counsel confirm your position.