Recordkeeping, Operational resilience, ICFR

DPDP Act, 2023

Digital personal data protection for India, penalties up to Rs 250 crore per violation.

Read overlay

SEBI CSCRF

Cybersecurity resilience for India's securities market: ISO 27001, VAPT, and incident reporting.

Read overlay

RBI IT Governance

Board-level cybersecurity mandate for banks and NBFCs: governance, vendor risk, and audit trails.

Read overlay

Electronic records, signatures, privacy.

FDA 21 CFR Part 11

Electronic records and signatures for closed and open systems.

Read overlay

HIPAA + HITECH

Privacy + security + breach notification + 2024 NPRM tightening.

Read overlay

GDPR Article 17

Right-to-erasure with cryptographic shredding — proof, not procedure.

Read overlay

Government cloud, criminal justice.

FedRAMP High

NIST 800-53 Rev 5 baseline; ATO inheritance for federal customers.

Read overlay

CJIS Security Policy

v5.9+ controls for criminal justice information.

Read overlay

eIDAS QES

EU SES / AdES / QES with long-term validation; eIDAS 2.0 EUDI Wallet readiness.

Read overlay

Security, AI governance, the assurance baseline.

ISO/IEC 27001:2022

The 93-control Annex A; ISO 27017 + 27018 extensions.

Read overlay

EU AI Act

High-risk system documentation under Articles 11/12/13/14, auto-generated from the chain.

Read overlay

SOC 2 Type II

TSC 2017, revised 2022 — the baseline assurance pack.

Read overlay
12 → 1
Regulator regimes activated on one platform
3 wk
Typical time to activate a new overlay
100%
Of audit events on one cryptographic chain
7
Industry-specific regulator maps
Industry maps

Each industry has its own regulator constellation.

The overlay catalogue covers the cross-cutting frameworks. The industry pages show how the overlays compose for each industry's specific exam pattern.

Browse industries Read the audit pillar