Contract Rules & Keywords
Exactly what contract analysis looks for, per Vendor Type + Contract Type combination.
Scope
Pick the combination to configure. Contract type defaults from the vendor type.
Default from vendor type: Data Processing Agreement
Contract requirements
Keyword → clause → framework requirement → compliance rule.
| Keyword / Phrase | Type | Match | Mandatory | Severity | Risk | Framework mapping | Actions |
|---|---|---|---|---|---|---|---|
| personal data | Required | Case-insensitive | Yes | High | +10 | DPDP Sec. 8(2) | |
| data breach | Required | Semantic | Yes | Critical | +20 | DPDP Sec. 8(6) | |
| security safeguards | Required | Semantic | Yes | High | +15 | DPDP Sec. 8(4) | |
| sub-processor | Required | Case-insensitive | Yes | Medium | +10 | DPDP Sec. 8(2) | |
| deletion | Required | Semantic | Yes | High | +12 | DPDP Sec. 8(7) | |
| retention | Required | Case-insensitive | Yes | Medium | +8 | DPDP Sec. 8(7) | |
| audit | Required | Case-insensitive | No | Medium | +6 | DPDP Sec. 8(4) | |
| confidentiality | Required | Case-insensitive | Yes | Medium | +6 | Internal IP-01 | |
| perpetual licence to personal data | Prohibited | Semantic | Yes | Critical | +25 | DPDP Sec. 6 | |
| data localisation in India | Preferred | Semantic | No | Low | +3 | DPDP Sec. 16 |