What does this scanner actually do?
It crawls the live URL you enter and reads the page’s HTML, cookies, and scripts directly, then checks 12 signals against requirements in the DPDP Act, 2023: privacy policy presence, cookies and trackers before consent, a consent banner, third-party trackers, a grievance officer, a consent withdrawal option, explanation of data-principal rights, children’s data handling, retention information, stated purpose of collection, a contact channel, and consent on data-collection forms.
Is this free?
Yes. You can scan any website URL for free and get an instant score and checklist. No signup is required to see your result.
How is this different from a DPDP self-assessment questionnaire?
A questionnaire asks you to describe your practices in your own words. This tool instead crawls your actual, live website and checks what it is really doing right now, whether cookies fire before consent, whether a consent banner exists, whether a grievance officer is listed. It is a technical scan of your website, not a self-reported assessment.
Does a high score mean my website is DPDP compliant?
No. A high score means the publicly visible technical signals on your website look reasonable. Full DPDP compliance depends on your actual internal data practices, which cannot be assessed from a website scan. Treat the score as a starting point, not a compliance certificate.
Can the scanner check my mobile app?
The scanner checks website URLs. For an app, you can scan the privacy-policy page linked from your app’s store listing, but the tool cannot analyse the app itself.
What should I do if my score is low?
Start with the failed and flagged items in your checklist, they are the clearest gaps. For anything beyond a quick fix, especially your consent mechanism, data retention practices, or grievance process, a lawyer-led DPDP compliance review will look at your actual data handling and help you close the gaps properly.