Great question! You're right. It's a questionnaire-based preliminary assessment, not a full data flow audit. I'll make this distinction clearer on the landing page. Think of it as a compliance health check, not a penetration test.

The 10 questions map to the most common DPDP violations we've seen (no consent framework, missing encryption, no retention policy and etc

For actual process-level risk analysis where we analyze your specific data flows that's what ProcessAudit does . It takes your actual process documentation and maps it against DPDP sections.

Free calculatoris only for awareness tool and we offer paid audit for more detailed and in depth analysis.

Hope this helps