Digital Personal Data Protection Act, 2023

Assess your DPDP readiness and know exactly what to fix.

CloudE5 guides your organisation through a structured DPDP self-assessment, keeps supporting evidence in one private workspace, and turns your answers into an explainable gap register and corrective action plan.

What the assessment covers

  • Governance and accountability
  • Personal data inventory and processing
  • Notice, consent and applicable processing grounds
  • Data principal rights and grievances
  • Security safeguards and breach response
  • Retention and erasure
  • Processors and third parties
  • Applicability and special obligations

How it works

  1. 1

    Create your workspace

    Register your organisation, verify your email and invite the colleagues who own privacy, security and operations.

  2. 2

    Answer the assessment

    Work through 60 questions across eight areas, from notice and consent to security safeguards and processors. Progress saves as you go.

  3. 3

    Attach evidence

    Upload the policies, records and reports that support each answer. Files stay private to your organisation.

  4. 4

    Review gaps and act

    See prioritised findings with the answers that produced them, then assign corrective actions with owners and due dates.

What you get

Readiness and coverage metrics

Completeness, response coverage, evidence coverage and a provisional readiness score, each calculated from your saved answers.

Explainable gap register

Every finding links back to the question, your answer, the mapped control and the reason it was raised.

Evidence trail

A record of which documents support which answers and how each was reviewed.

Corrective action plan

Remediation tasks with priority, owner, target date and status for each gap.

Built for sensitive compliance data

Organisation-scoped data

Every record is isolated to the organisation that owns it and checked on the server for every request.

Role-based access

Administrators, contributors and viewers see and do only what their role allows.

Self-hostable

Runs on a server you control with a local SQLite database and file storage. No external database required.

CloudE5 is a self-assessment tool. Scores and findings are generated from the information your organisation provides using a documented, provisional methodology. They are not legal advice, are not a determination of compliance with the DPDP Act or the DPDP Rules, and do not replace review by qualified legal counsel.