Compliance Rule Builder

No-code IF/THEN engine. Every rule maps to a framework clause for end-to-end traceability.

Back to hub

Visual flow preview

Sample logic block — open "New rule" to author your own

When

Clause text contains "breach notification"

And

Notification window > 72 hours

Then flag

Critical · mapped to DPDP Sec. 8(6)

Run on contracts

Rule simulator

Test against sample contracts

"Processor shall notify Controller of any Personal Data Breach within a reasonable time…"

Critical

Rule triggered on 3 of 6 sample contracts

Avg match confidence: 94%

Active compliance rules

7 enabled · 8 total · all rules mapped to a framework clause

Breach notification ≤ 72 hours (DPDP Sec. 8(6))

R-101 · maps to Sec. 8(6) · Personal data breach notification

IF clause matches 'breach' AND notification_window > 72h THEN flag Critical

DPDP

Critical

14 hits

Sub-processor change consent (DPDP Sec. 8(2))

R-102 · maps to Sec. 8(2) · Accountability for sub-processors

IF 'sub-processor' AND NOT 'prior consent' THEN flag Critical

DPDP

Critical

9 hits

Children's data parental consent (DPDP Sec. 9)

R-103 · maps to Sec. 9 · Processing of children's data

IF data_category = "Children's data" AND NOT 'verifiable parental consent' THEN flag Critical

DPDP

Critical

3 hits

Cross-border transfer to notified country only (DPDP Sec. 16)

R-104 · maps to Sec. 16 · Cross-border transfer of personal data

IF cross_border = TRUE AND NOT 'notified country' THEN flag High

DPDP

High

11 hits

Reasonable security safeguards (DPDP Sec. 8(5))

R-105 · maps to Sec. 8(5) · Reasonable security safeguards

IF NOT ('AES-256' OR 'encryption at rest') OR NOT 'TLS' THEN flag High

DPDP

High

6 hits

Annual audit right for Significant Data Fiduciary (DPDP Sec. 10)

R-106 · maps to Sec. 10 · Significant Data Fiduciary obligations

IF audit_cadence > 12 months THEN flag Medium

DPDP

Medium

8 hits

Liability cap ≥ 24 months (internal)

R-107 · maps to INT-1 · Liability cap ≥ 24 months fees

IF liability_cap < 24*monthly_fee THEN flag High

Internal

High

0 hits

Right to erasure + deletion certificate (DPDP Sec. 8(7))

R-108 · maps to Sec. 8(7) · Erasure on withdrawal / purpose completion

IF NOT 'deletion certificate' THEN flag Medium

DPDP

Medium

5 hits