Know Your Compliance Score Before the Regulator Does

The 0–100 score is a weighted composite across 6 modules: consent setup (20%), rights request SLA performance (20%), breach reporting (20%), data inventory completeness (15%), privacy policy publication (15%), and processor Data Processing Agreement coverage (10%). Module weights reflect penalty exposure under DPDPA — consent and breach carry the highest individual penalties.

A Record of Processing Activities (RoPA) is a structured document listing every category of personal data your organisation processes, along with purpose, legal basis, retention period, and processor details. Under DPDPA S.10, Significant Data Fiduciaries (SDFs) are required to maintain an up-to-date RoPA. DPDPA Shield generates your RoPA automatically from your data inventory — no manual spreadsheet required.

A missing or expired DPA with a data processor reduces your processor coverage module score and surfaces as a critical issue in the compliance dashboard. Processor obligations under DPDPA are the Data Fiduciary's responsibility — the Act makes clear that outsourcing processing does not outsource liability. The dashboard shows each processor's DPA status: SIGNED, MISSING, or EXPIRED.

The Board PDF is designed as an executive summary — useful for board presentations and internal governance reviews. For regulator submissions, we recommend exporting the full RoPA and individual module evidence packages (closure PDFs, incident logs, consent audit trails). The compliance dashboard links to each of these exports from a single interface.