Skip to content

DPDP Rules: substantive obligations take effect 13 May 2027 (computed).

DPDPNiti
All solutions

Solutions

Insurance

IRDAI's Information and Cyber Security Guidelines carried beside the Act, with your reasoning recorded on the controls that answer both.

The Act is written for anyone who processes digital personal data. Whether and how it applies to you is what our questionnaire answers.

Sectors on this page

  • Insurance

A few of the questions the readiness assessment asks

  1. Does any processing rely on the Data Principal's consent rather than only on a legitimate use?
  2. Is every vendor that processes personal data on your behalf covered by a current written contract?
  3. Do you record the moment you become aware of a breach, and can you file the detailed Data Protection Board report within 72 hours of it?
  4. Could you produce, for one individual, everything you hold and everyone you shared it with?
  5. Has the Central Government notified you, or a class you belong to, as a Significant Data Fiduciary?
  6. If you were notified as a Significant Data Fiduciary, have you scheduled the twelve-monthly DPIA and audit?

From obligation to audit record

  1. Statutory obligations become controls with owners, evidence with reviewers, and a record you can put in front of an auditor.
  2. The place the compliance work actually happens: a control per obligation, an owner per control, evidence per requirement, and a queue where somebody reviews it.
  3. An append-only audit record behind every decision and every piece of evidence

What you record in DPDPNiti

  • Where an IRDAI duty meets a DPDP duty, your reasoning is recorded on the control that answers both
  • Vendors and sub-processors registered with the contract that governs them
  • Rights requests and incidents, each on its own lifecycle, with every transition attributable

Frameworks carried beside the Act

  • IRDAI Information and Cyber Security Guidelines: carried for insurers
  • CERT-In Directions on cyber incident reporting: carried for every organisation

On the roadmap

  • Regulator crosswalkComing
  • Breach deadline clocksComing
  • Board and CERT-In breach reportsComing

See it yourself

Open the live demo yourself: a few questions, and you are inside a working synthetic organisation.

Open the live demoPricing

See it against your own obligations

A walkthrough of the real product — the assessment, the controls, the evidence and the audit trail — with the roadmap shown as the roadmap.

Book a tailored demoEmail us instead

Scheduling opens Calendly, a third party who will see what you enter there. Email reaches us directly and this site records nothing either way.