DPDP Act 2023 · automated website audit

See where your website
breaks DPDP.

Enter a URL. Privista Scan scans your site, checks it against India's DPDP Act and its 2025 Rules, and returns a scored, evidence-backed report in minutes, ready to share with your team or a client.

25+ DPDP checks Evidence for every finding Pages scanned automatically Data hosted in India
DPDP Act 2023 · Compliance Report
scan.privista.in
0
score
Privacy policy discoverable
Consent captured before trackers fire
Cookie policy present and accurate
Grievance officer contact published
HTTPS and security headers
Non-compliant
0
Passed
0
Warnings
0
Failed
0
Pages
Scanner dpdp-auditor/1.0
From URL to report

Compliance, checked automatically

No integration, no code, no waiting on a manual audit. Point the scanner at any site and get a prioritised report you can act on the same day.

Step 01

Enter your URL

Paste a domain or a specific page. Pick a scan mode based on how deep you need to go.

Step 02

Automated website scan and analysis

The scanner reviews multiple pages, inspects trackers, forms and policies, and evaluates each against the DPDP Act.

Step 03

Scored, evidence-backed report

A compliance score, a clear verdict, and every finding backed by the evidence the scanner actually observed.

Step 04

Share or export

Send a live report link, toggle light or dark theme, and revisit past scans from your assessment history.

Coverage

What the scanner checks

Every check maps to a duty under the DPDP Act and its 2025 Rules, so a finding is never abstract. It points to the exact obligation at stake.

Notice and consent

Is there an itemised notice, and is consent captured before personal data is processed?

Cookies and trackers

Which third-party scripts and cookies fire, and do any run before the visitor agrees?

Policies

Are the privacy policy, terms, cookie and refund policies present, reachable and adequate?

Rights and grievance

Can a person exercise access, correction and erasure, and is a grievance contact published?

Children's data

Signals of processing that would need verifiable parental consent under the Act.

Security posture

HTTPS, transport security and headers that show reasonable safeguards for personal data.

Data-collection forms

Where the site collects personal data, and whether each field has a lawful, stated purpose.

Third-party sharing

External destinations that receive data, flagged for review including cross-border transfers.

Three depths

Pick the scan for the job

A quick health check, a standard report, or a full client-ready audit. Deeper modes review more and capture richer evidence.

Fast scan

Quick health check

Highest-risk checks first with shorter evidence. The fastest way to see if something is badly wrong.

DepthFocused
EvidenceConcise
Best forTriage
Recommended Professional

Standard report

Balanced coverage and detail. The right choice for a thorough, shareable compliance report.

DepthFull
EvidenceDetailed
Best forMost sites
Deep Audit

Client-ready audit

Highest detail with the fullest evidence trail. Built for final audits and reports you put your name on.

DepthExhaustive
EvidenceComplete
Best forDeliverables
Inside the report

A report a lawyer can read, and a developer can fix.

Every scan produces a structured, tabbed report. It opens with a score and a verdict, then lets anyone drill from the headline down to the raw evidence.

Evidence for every finding Shareable live link Light or dark theme
Overview

Score, verdict and the headline pass, warning and fail counts.

Summary

A plain-language read of where the site stands and what to fix first.

Risks

Issues ranked by severity so remediation starts with what matters.

Findings

Every individual check, its result and the reason behind it.

Categories

Findings grouped by DPDP theme, from notice to security.

Inventories

Trackers, cookies, forms and third parties the scanner discovered.

Evidence

The observed proof behind each finding, captured during the scan.

Methodology

How the score is computed and what each check actually tests.

Reading the score

A snapshot to fix, not a certificate

The score is an automated, evidence-based estimate of where a site stands today. It is built to prioritise real fixes, not to certify legal compliance, which only your assessment of the law can do.

Compliant
70 to 100

Core duties are visibly met. Keep monitoring for drift as the site and the law change.

Partial
40 to 69

Some obligations are met and others are not. Work the ranked risks from the top down.

Non-compliant
0 to 39

Significant gaps are exposed. Prioritise consent enforcement and missing policies first.

Pricing

Start with a free scan

Run your first scan at no cost. Paid plans add deeper modes, more scans, saved history and shareable client reports.

Free

See where a single site stands.

₹0
  • 1 Fast scan
  • Score, verdict and headline findings
  • Shareable report link
Run a free scan
Starter

Regular checks for one business.

₹999/mo
  • 10 scans / mo
  • Fast and Professional modes
  • Assessment history
Choose Starter
Pro Popular

Consultants and in-house teams.

₹3,499/mo
  • 50 scans / mo
  • All modes incl. Deep Audit
  • Client-ready shareable reports
  • Priority scanning
Choose Pro
Agency

High volume and white-label.

Custom
  • Bulk and scheduled scans
  • White-label reports
  • API access
  • Priority support
Talk to us
The questions people ask

Answers, stated correctly

No. The score is an automated, evidence-based snapshot of what the scanner can observe from outside your site. It is built to help you prioritise fixes, not to certify compliance. Whether you meet the DPDP Act is a legal judgement that a qualified person makes, using the report as input.

Across 25 or more checks: notice and consent, cookies and trackers, published policies, data-principal rights and grievance contact, children's-data signals, security posture, data-collection forms and third-party or cross-border sharing. Each check maps to a specific DPDP duty, and each result carries the evidence behind it.

Privista Scan reviews multiple pages automatically, and the review depth grows with the mode you choose. A Fast scan focuses on the highest-risk checks, while Professional and Deep Audit review more pages and capture fuller evidence.

No. A scan is a read-only external analysis. It looks at your pages the way a visitor's browser would and never modifies your site or writes anything to it.

In India. Scans, reports and history are held in an India region, in line with the rest of the Privista platform.

Scan finds the gaps; Consent fixes the biggest one. Scan is the diagnosis, an evidence-backed report of where a site falls short. Consent is the treatment for the consent gap, collecting and proving consent going forward. Both are part of one Privista platform.

Free to start

Find out where your site stands in minutes.

Run a scan now and get a scored, evidence-backed DPDP report you can share today.