India DPDP workspace
Map category-level processing activity and prepare locally generated evidence. This workspace does not connect to a production database, send inventory contents to a service, or participate in peer-sync in v1.
Phase 1 · available
Micro-RoPA Inventory Mapper
Catalog what categories of personal data are handled, which systems and vendors touch them, and why.
Phase 2 · available
Notice & consent generator
Draft separate purpose notices from a local static dictionary and record modeled consent choices independently.
Phase 3 · available
SDF & children’s-data guardrail
Run qualitative, versioned engineering reviews without presenting an official SDF determination or verified parental consent.
Phase 4 · available
Breach playbook & timer
Prepare separate initial-notice and detailed-report milestones locally, with a Rule 7(2) 72-hour timer and exportable review artifacts.
Phase 5 · available
DPDP audit log
Inspect and verify the append-oriented local hash chain without implying immutable storage or a server-side audit trail.
Sequenced later
Notice, breach, assessment, and audit modules
These modules will be added one boundary at a time after their dependencies and source metadata are reviewed.
Data boundary
Records are stored in a dedicated browser IndexedDB database. Record fields are category-level metadata; do not enter live Aadhaar, PAN, customer records, credentials, or secrets.
Exports are user-triggered downloads. A digest detects changes to the exported snapshot; it does not verify truth, authorship, or legal compliance.