Privacy education, consultancy & implementation, in 50+ jurisdictions.enquiry@vedhacon.com
Guidance and examples adapt to your selection.↑↓ to browse, ↵ to apply
Asia-Pacific
IndiaDPDP Act 2023 & Rules 2025 ChinaPIPL, DSL & CSL Japan & South KoreaAPPI and PIPA South East AsiaSix ASEAN regimes compared Australia & New ZealandPrivacy Act 1988 and Privacy Act 2020
Europe
European UnionGDPR, obligations & implementation United KingdomUK GDPR and DPA 2018 Switzerland & EEArevFADP and EEA adoption Türkiye & wider EuropeKVKK, Serbia, Ukraine, Russia EU AI ActRisk tiers and privacy overlap
Americas, Middle East & Africa
CaliforniaCCPA / CPRA consumer rights United StatesState laws and sectoral rules Canada & Latin AmericaPIPEDA, Law 25, LGPD and more Middle EastUAE, Saudi Arabia, Qatar, Bahrain, Oman AfricaNDPA, POPIA, Kenya DPA and more
Plain-language guides for 50+ jurisdictions, updated as the law changes.Browse every jurisdiction
Featured jurisdictionIndia, DPDP Act 2023

Notice, consent, Data Fiduciary duties, SDF obligations and breach intimation, explained.

Open the guide
How we help
Privacy educationBoards, engineers, HR & legal Consultancy & DPOStrategy, gap analysis, DPO as a service ImplementationData mapping, notices, consent, DPIAs Certification readinessISO/IEC 27001, 27701 & 42001 ISO standardsISO/IEC 27001, 27701 & 42001 guide Audit & assuranceInternal audit and evidence packs AI governanceControls for models in production Breach & incident responsePlaybooks, drills and notification All servicesThe full engagement model
Where most engagements startA readiness assessment, then a plan

We scope against the laws that actually apply to you, then sequence the work by risk.

Start the assessment
By type
WhitepapersIn-depth research & briefings BlogNotes from practitioners News & updatesRegulatory change, explained GuidesPractical how-to resources
Featured whitepaperThe DPDP implementation clock

What must be operational before the substantive obligations commence in 2027.

Read the briefing
Diagnostics & toolkits
Readiness checker10-question DPDP check DPIA & RoPA templatesReady-to-adopt toolkits Consent & vendor toolsRegisters & questionnaires Regulatory trackerHorizon scanning Contract intelligence demoAI clause & obligation analysisMore ToolsThe full toolkit
Free, no sign-upCheck your readiness in 3 minutes

Ten questions, an instant score and your top exposures under the DPDP Act.

Start the assessment
Grow your expertise
GRC AcademyFrom zero to practitioner AI ExplainedAI, GenAI & RPA in plain English CommunityAsk a moderator AI AssistantAnswers in seconds Learning tracksFoundation to certification Careers in GRCEnter from any background Expert networkContribute & mentor
Free, alwaysZero to practitioner

Track 01 assumes no prior knowledge of governance, risk and compliance.

Start Track 01
Privacy toolkit · DPDP, GDPR and ISO

The privacy toolkit practitioners actually use.

DPIAs, registers, vendor reviews and audits, built as live dashboards rather than static templates. Try four instruments free today, then unlock the full workspace as a member.

Try the free tools See the member workspace
0Instruments
0Audit controls
0Vendor controls
0RoPA fields
vedhacon / workspace / ropa-dashboard.xlsxLive
84%Compliance
Activities46
Open gaps3
Checklist11 / 13
Transfers7
Legal basis92%
Retention set78%
Processor DPAs64%
Reviews current41%
Illustrative figures. Members work with their own data.
The catalogue

Eleven instruments. One control set.

Every tool maps to the same obligations under the DPDP Act, GDPR and ISO/IEC 27701, so your evidence is built once and reused across assessments, audits and vendor reviews.

Free
Contracts

Contract intelligence demo

Liability caps, indemnity carve-outs, termination rights, silent clauses and obligations across a contract portfolio, in one auditable view.

  • Interactive demo
  • Anonymised data
Launch the demo
Free
Diagnostics

DPDP readiness check

Ten questions across the obligation areas of the DPDP Act 2023 and Rules 2025. Instant score, heat map and your top three exposures.

  • 10 questions
  • About 3 minutes
Start the check
Members
Assessments

DPIA workbook

An 18-section, regulator-ready Data Protection Impact Assessment, from screening and necessity through to DPO and executive sign-off.

  • 18 sections
  • DPDP and GDPR Art 35
Try free screening
Members
Assessments

Privacy risk register

Inherent and residual scoring on a five-by-five matrix, with ten starter risks, owners, target dates and treatment plans.

  • 5 x 5 matrix
  • 10 starter risks
Try the risk calculator
Members
Registers

RoPA compliance dashboard

A 46-field Record of Processing Activities with a live compliance ring, 17 key metrics and a 13-point Article 30 and multi-law checklist.

  • 46 fields
  • 13-point checklist
Members
Third parties

Global vendor privacy assessment

66 controls across nine domains, with evidence, action and jurisdiction registers, criticality weighting and an automatic decision.

  • 66 controls
  • 15 laws
Members
Assurance

Privacy compliance audit dashboard

A 107-control audit programme across 11 domains, with weighted maturity, findings by risk, readiness indicators and a heat map.

  • 107 controls
  • 11 domains
Members
Horizon scanning

Regulatory tracker

Commencements, amendments and enforcement trends across ten jurisdictions, with the action each change demands of you.

  • 12 instruments
  • Reviewed quarterly
Members
Speak-up

Whistleblower and speak-up toolkit

A confidential intake channel with an anonymous option, evidence upload, tracking references and a printable QR poster.

  • Anonymous option
  • QR poster
Members
Library

The full toolkit library

Breach register and playbook, transfer route finder, vendor questionnaire and an ISO 27001, 27701 and 42001 evidence pack.

  • 6 workbooks
  • Editable

No tool matches that search.

Free lab · no sign-up

Two instruments, free to use now.

Screen a new project for a DPIA and score a privacy risk in seconds. Nothing leaves your browser.

Do you need a DPIA?

Switch on every statement that applies to the processing you are planning.

Screening resultAnswer the triggers above

Switch on every statement that applies to the processing you are planning.

Score a privacy risk

Pick the cell that matches the impact and likelihood. Impact runs up the side, likelihood along the bottom.

Impact

Risk ratingSelect a cell

Scores run from 1 to 25, banded Low, Medium, High and Critical, the same scale as the member risk register.

Want to keep these results? Members save screenings and risks straight into the DPIA workbook and risk register, with owners, dates and exports.

Unlock the workspace
Free or member

What you get, side by side.

CapabilityFreeMembers
Contract intelligence demoIncludedIncluded
DPDP readiness check and scoreIncludedIncluded
DPIA screening and risk calculatorIncludedIncluded
Specialist-reviewed readiness reportOn requestIncluded
18-section DPIA workbookNot includedIncluded
Privacy risk register with treatment plansNot includedIncluded
46-field RoPA with compliance dashboardNot includedIncluded
Vendor assessment: 66 controls, 15 lawsNot includedIncluded
Audit programme: 107 controls, 11 domainsNot includedIncluded
Regulatory tracker and consent registerNot includedIncluded
Save, print to PDF and export CSVNot includedIncluded
Editable Excel and Power BI packsNot includedIncluded

The full workspace is for members

Every workbook on this page, live and connected, with save, print and export. Configured to your laws, sector and vendors, and reviewed with a specialist.

Request membership Member sign in
FAQ

Questions about the tools.

Which Vedhacon tools are free?

The contract intelligence demo, the ten-question DPDP readiness check, the DPIA screening test and the privacy risk calculator on this page are free and need no sign-up. The full DPIA workbook, risk register, RoPA dashboard, vendor assessment, audit dashboard, regulatory tracker, consent register, whistleblower toolkit and the wider library are reserved for members.

Does my data leave my browser when I use the tools?

No. The free tools and the member workbooks run in your browser, and saved work is stored on your own device. Nothing is sent to Vedhacon unless you choose to submit a form, such as a request for a reviewed report.

What laws do the tools cover?

The tools are built around the DPDP Act 2023 and DPDP Rules 2025, EU and UK GDPR, and the controls expected under ISO/IEC 27001, 27701 and 42001. The vendor assessment adds a jurisdiction register covering 15 laws, including CCPA and CPRA, LGPD, PIPEDA, PDPA, POPIA and the EU AI Act.

How do I get member access?

Request membership and a Vedhacon specialist will confirm the scope with you and activate your account. Members sign in once and every tool on this page opens in their workspace, with save, print and export enabled.

Can the tools be configured for my organisation?

Yes. Every workbook can be tailored to your systems, vendors, jurisdictions and approval workflow, and delivered as an editable Excel or Power BI pack with training for your team.

Put the tools to work

Tailored to your stack, owned by your team.

We configure every workbook to your systems, vendors and jurisdictions, then train your team to run it without us.

Request membership Talk to a consultant