DPDP ControlMap
DPDP Act Readiness — Technical and Governance Evidence in One View
DPDP ControlMap is a compliance workspace for India's Digital Personal Data Protection Act, 2023 and the DPDP Rules. It scores endpoint security from Wazuh CIS benchmark results and tracks notices, consent, data inventory, rights requests and the other DPDP duties — giving privacy teams, DPOs, CISOs and consultants one readiness view per organisation, with every change recorded in a tamper-evident audit log.
26+
Capabilities
Technical Scoring
Endpoint security evidence from Wazuh CIS benchmark results, mapped to DPDP safeguards and scored per control family.
CIS → DPDP mappingKey
Maps Wazuh CIS checks to DPDP safeguards: encryption, access control, logging, network, endpoint, data minimisation, backup and patching
DPDP technical score
Weighted score per control family, shown next to the raw CIS score
Machines and history
Per-machine results, trends across assessments, coverage gaps and remediation lists
Wazuh integrationLive
Import a CSV or SCA JSON export, or pull live results from the Wazuh API
DPDP GRC Center
Every governance duty under the Act in one place, each control carrying its own evidence, findings and remediation actions.
Combined postureKey
One view that combines technical and governance readiness
Lawful processing
Processing purposes and grounds, including legitimate uses under §7
Notice management
Versioned privacy notices with owners, reviewers and change history
Consent management
Consent register with evidence, expiry, withdrawal and customer details; Excel template import
Data discovery & inventory
Datasets, systems, owners, storage location, retention, classification and encryption
Data flow mappingKey
Visual map of how personal data moves from sources through apps, processors and storage
Privacy framework
Security safeguards, breach response and policy controls under §8
Children's data
Activities involving children, verifiable parental consent and safeguards under §9
SDF / DPIA / audit
Significant Data Fiduciary checks, DPO details, DPIA and audit tracking
Data principal rights / DSAR
Access, correction and erasure requests and grievances, with statutory due dates and overdue flags
Cross-border / §16
Transfer assessments per data flow and a watch list of government restrictions
Evidence, findings, remediation
Owners and due dates on every finding and remediation action
Registers
The supporting registers an auditor expects to see alongside the DPDP controls.
Security awareness programs
Training programmes and completion rates
Policy management
Policy register with approval and review dates
Vendor risk management
Vendors by risk tier with assessment due dates
Incident & breach log
Incidents from detection through Board and Data Principal notification to closure
Platform & Reporting
Built for consultants and in-house teams alike — hosted, on-premises or fully offline.
Readiness reports
PDF readiness reports for management and auditors
Multi-tenant
Many client organisations on one server, with data kept separate per organisation
Sign-in and roles
Single sign-on through Keycloak or local accounts, with role-based access per organisation
Audit logKey
Tamper-evident record of sign-ins and every change
Offline mode
Runs fully in the browser with no server, for air-gapped sites and demos
Reference dataset
A worked example (a consumer lending company) loaded from Settings for training and walkthroughs
Frequently asked questions
Questions about DPDP ControlMap
How DPDP ControlMap works, what it covers, and what to expect when you deploy.
Still have questions?
Talk to our team or browse the full knowledge base.
Confidential — prepared for client review.
All features subject to licensing. Contact your account manager for deployment details.