Live DPDP Compliance Visibility, for Your Board, Subsidiaries & CA Firm

Yes, this is the core value of the portal. Every metric shown is live: obligation scores update within minutes of a new scan or assessment; DSR counts reflect the current open and overdue queue; the alert feed shows events from the last few hours, not the last report cycle. When you resolve a gap, the score changes in the portal. When a DSR SLA is breached, an alert appears. When a consent banner scan flags a missing banner, that specific alert appears in the live feed. Board members who open the portal the morning of a meeting see the exact current compliance picture, not a snapshot from the last reporting cycle.

Yes, and this is one of the primary use cases. You can generate a token with a specific expiry (for example, 7 days during an audit engagement) and optionally restrict it to the IP range of the auditor's network. The external auditor sees the live obligation scores, the alert feed, and can download the evidence package (consent audit log, DSR records, gap assessment, scan history) directly from the portal, without requiring any access to your dcomply account, your operational data, or any other system. When the engagement ends, revoke the token. The portal is designed to be the single compliance documentation interface for external audit engagements.

The evidence package is a ZIP file containing four documents: (1) Consent Audit Log, a PDF record of every consent obtained, modified, or withdrawn, with timestamps and data subject identifiers (for DPDP Section 6 evidence); (2) DSR Response Records, a complete record of all Data Subject Requests received, the type of request, date received, date responded, and outcome (for DPDP Sections 11–14 evidence); (3) Gap Assessment Report, the current obligation-by-obligation compliance status with any identified gaps and remediation actions taken (for DPDP Act obligations generally); and (4) Website Scan History, all scanner results showing when scans were run, what was found, and what the current status is. This package is designed to answer "show me your DPDP compliance evidence" in one download.

Yes. On the Professional and Enterprise plans, the client portal can be white-labeled with your firm's logo, brand colors, and a custom domain. Clients who open their portal link see your firm's name and branding throughout, not dcomply's. This is designed specifically for CAs and compliance consultancies who want to deliver a professional, branded compliance experience to their corporate clients. The master dashboard (your consolidated view of all client scores) is also white-labeled, so your team operates within a branded compliance management environment.

Yes. The portal shows the current count of open DSRs, the count of overdue DSRs (where the 30-day DPDP response window has been exceeded), and the live alert feed flags each SLA breach with the specific DSR number and the date it became overdue. The DSR readiness score in the obligation breakdown reflects both the presence of a functioning DSR submission channel and the current SLA performance, a consistently overdue DSR queue will show in the obligation score as Amber or Red, not just in the alert feed. This gives boards and HQ teams an honest picture of DSR operational performance, not just whether a DSR button exists on the website.