Built to support the audits you’re already facing
A full GDPR/DPDP capability suite today — and a governance record designed to make SOC 2, ISO 27001, and HIPAA evidence-gathering straightforward.
Capabilities mapped to controls
| Capability | What it does | Maps to |
|---|---|---|
| Data-subject export | Produce a complete export of a subject’s personal data on request. | GDPR Art. 15 · DPDP access |
| Crypto-shred erasure | Irreversibly erase a subject’s PII by destroying its key material; the audit record remains as ciphertext. | GDPR Art. 17 · DPDP erasure |
| Consent ledger | Record and track consent for processing, with a tamper-evident history. | GDPR Art. 7 · DPDP consent |
| Retention & auto-purge | Automatically crypto-shred the PII of subjects offboarded beyond the retention window — runs daily. | GDPR Art. 5(1)(e) · DPDP s8(7) |
| Breach-notification workflow | A structured 72-hour breach-notification process with a running clock. | GDPR Art. 33 |
| Grievance redressal | A formal, tracked grievance process for data principals. | DPDP s13 / s14 |
A grievance mechanism your employees can actually use
India’s DPDP Act requires a Data Fiduciary to provide a readily available grievance-redressal mechanism. Grantledger builds one in: an employee raises a grievance, it opens with a response deadline, your admins are notified, and you record the resolution — with the details encrypted and every step audit-logged.
Raise → 30-day SLA clock → resolve, with overdue grievances flagged so nothing quietly lapses.
Made for the frameworks your customers demand
SOC 2
Access provisioning/deprovisioning evidence, least-privilege enforcement, periodic access reviews, and an immutable activity log — the access-control criteria auditors probe.
ISO 27001
Supports Annex A access-control objectives: user access management, review of user access rights, and removal of access rights on termination.
HIPAA
Helps satisfy the Security Rule’s access-management and audit-control requirements for workforce access to systems handling ePHI.
Turn “we think we’re compliant” into evidence.
Start free, or ask a compliance-specific question.