← Back to Tools
🎯

Identify Your Compliance Gaps

Six quick assessments. Pick the framework that fits your situation, answer 10 yes/no questions, and find out whether you actually need it — before you commit to any audit, certification, or vendor.

6 frameworks10 questions each~2 min per assessment
💡

Not sure where to start? If you handle Indian user data, begin with DPDPA. If enterprise clients are asking for security proof, start with ISO 27001 or SOC 2. If you handle US health data, start with HIPAA. Our team will follow up with a personalised reading once you submit.

🇮🇳

DPDPA

Digital Personal Data Protection Act

For any organisation collecting or processing personal data of Indian citizens.

Best for: SaaS, fintech, e-commerce, healthtech, EdTech — anyone handling Indian user data.
Questions10
Time~2 min
Start Assessment →
🔐

ISO 27001

Information Security Management

Globally recognised standard for proving you take information security seriously.

Best for: Companies asked for security proof by enterprise clients or expanding globally.
Questions10
Time~2 min
Start Assessment →
🔏

ISO 27701

Privacy Information Management

The privacy extension to ISO 27001 — for organisations processing personal data at scale.

Best for: Data processors needing to demonstrate GDPR / DPDPA / privacy compliance to clients.
Questions10
Time~2 min
Start Assessment →
☁️

SOC 2

Service Organization Controls

The de-facto trust standard for SaaS and cloud providers — especially serving US clients.

Best for: SaaS, MSPs, and cloud platforms whose customers ask for a SOC 2 report.
Questions10
Time~2 min
Start Assessment →
🛡️

VAPT

Vulnerability Assessment & Penetration Testing

Active security testing for your applications, APIs, and infrastructure.

Best for: Anyone running a web app, mobile app, or API exposed to the internet.
Questions10
Time~2 min
Start Assessment →
⚕️

HIPAA

Health Insurance Portability & Accountability Act

US privacy and security rules for handling protected health information (PHI).

Best for: Healthtech, hospitals, insurers, and any vendor handling US patient or health data.
Questions10
Time~2 min
Start Assessment →

Already know what you need? Talk to our team.

Skip the assessment and get straight to a scoping call. We will map your current posture against the framework, identify gaps, and outline the path to audit-readiness.