Compliance
What this covers
These posts cover the compliance side of application security for Indian product teams: DPDP Act obligations, SOC 2 and ISO 27001 preparation, CERT-In expectations, and how to answer an enterprise security questionnaire honestly without losing the deal.
Compliance work goes wrong when it is treated as paperwork bolted on at the end. These posts are about the engineering half — the evidence, the controls and the honest answers that make an audit or a vendor review uneventful.
2 posts in Compliance.
Compliance · 5 min read
The Act is short, and most of what it asks a product team for is engineering work you can do in a sprint: know what you hold, prove consent, delete on request, notice a breach.
Compliance · 3 min read
The instinct is to answer yes to everything and hope nobody checks. Reviewers check, and a caught overclaim costs more than every honest no combined.
Scope and a fixed quote within two working days. First consultation is free.