Loading…
Loading…
Learn how Dataspace GovernanceOps AI helps privacy, security, compliance, and consulting teams move from obligations to accountable action.
4 frameworks
DPDP · ISO · SEBI · custom
Evidence-first
Every action stays traceable
Built for teams
Owners, reviewers, auditors
Start here
Add your organization profile, industry, systems, data categories, and third-party relationships.
Select one or more frameworks. The rules engine maps your scope to relevant universal controls.
Assign owners, attach evidence, accept the action plan, and export a pack for your auditor or board.
End-to-end operating model
The platform is designed as a continuous loop. Teams start with context, create accountable work, attach proof, review the result, and keep the program current as systems, vendors, regulations, and risks change.
01
Profile systems, data, vendors, people, and business activities.
02
Select frameworks and calculate applicable controls and gaps.
03
Assign owners, collect evidence, manage rights, incidents, and risks.
04
Verify evidence, run approvals, audits, management reviews, and CAPA.
05
Export reports, workbooks, auditor packs, and controlled trust links.
Set up your organization and complete your first readiness assessment.
What it is for
Create the shared context that lets the platform select relevant obligations instead of asking your team to work through an irrelevant checklist.
When to use it
Use this when onboarding a new organization, launching a new framework, or expanding an existing scope to a department, product, geography, or data category.
How it works
What you get
Who operates it
Organization Admin starts the setup; Members contribute answers and evidence; Consultants can run client assessments.
Turn company context into a prioritized, evidence-backed control plan.
What it is for
Give teams one reusable control model across frameworks, so one piece of evidence or one completed practice can contribute to several compliance outcomes.
When to use it
Use it for gap analysis, recurring compliance reviews, audit preparation, or whenever ownership and due dates are unclear.
How it works
What you get
Who operates it
Members answer controls; Organization Admins approve ownership and dates; Consultants can coordinate client work; auditors consume evidence and reports.
Operate the governance workflows needed to understand and protect personal data.
What it is for
Move privacy governance from a static policy exercise into an operating record of what data exists, why it is processed, who touches it, and what happens when rights or incidents arise.
When to use it
Use it whenever a new product, vendor, processing purpose, data location, consent journey, rights request, or incident needs a traceable owner and outcome.
How it works
What you get
Who operates it
Privacy or Governance leads own the records; business and system owners provide facts; Organization Admins control access; reviewers verify evidence and decisions.
Work across DPDP, ISO 27001, SEBI CSCRF, and your own control library.
What it is for
Give each framework its own specialist workspace while keeping shared controls, evidence, people, and remediation connected.
When to use it
Choose a framework workspace when you need framework-specific obligations, registers, reports, calendars, declarations, or certification/submission preparation.
How it works
What you get
Who operates it
Framework owners operate the specialist workspace; Organization Admins manage scope and access; consultants support delivery; auditors receive controlled outputs.
Use structured AI assistance without losing control of the underlying evidence or rules.
What it is for
Reduce the time spent turning structured governance facts into useful guidance and first drafts, while leaving the final decision with the accountable human owner.
When to use it
Use Copilot when a team needs help answering an assessment, explaining a gap, drafting a policy or record, or converting evidence into a practical roadmap.
How it works
What you get
Who operates it
Members can provide inputs; Organization Admins approve outputs; consultants use drafts for delivery. AI output is assistive and requires human review.
Collect, verify, export, schedule, and share audit-ready evidence.
What it is for
Create a defensible chain from a control or obligation to the document, link, reviewer, status, and report that proves it.
When to use it
Use it during control operation, internal review, customer due diligence, certification, board reporting, or an external audit.
How it works
What you get
Who operates it
Members upload evidence; Organization Admins and reviewers verify it; auditors consume scoped packs; consultants prepare client-ready deliveries.
Coordinate internal owners and deliver governance work across client organizations.
What it is for
Make accountability visible: every unresolved control, evidence request, approval, and client deliverable has a person, status, and next action.
When to use it
Use it for distributed teams, maker-checker processes, recurring reviews, consultant portfolios, or any program where work crosses departments or organizations.
How it works
What you get
Who operates it
Members execute work; Organization Admins govern the organization; Consultants work across assigned clients; Super Admins manage the platform catalog.
Connect source systems and manage plans, seats, invoices, and subscriptions.
What it is for
Keep governance data connected to the systems where work happens and make platform access, pricing, and subscription state predictable.
When to use it
Use integrations when evidence or inventory lives in another system; use billing controls when starting a trial, changing plans, managing seats, or reconciling invoices.
How it works
What you get
Who operates it
Organization Admins manage connectors, plans, and billing; Members use connected evidence; platform admins manage catalog and integrations.
Operating model
| Role | Primary responsibility | Typical actions |
|---|---|---|
| Member | Execute assigned governance work | Answer controls, upload evidence, update tasks, complete training |
| Organization Admin | Own the organization program | Set scope, invite users, assign owners, verify evidence, manage billing |
| Consultant | Deliver work across client organizations | Create engagements, run assessments, prepare reports, deliver client packs |
| Super Admin | Manage the platform catalog | Maintain frameworks, controls, mappings, integrations, users, and regulatory content |
Common questions
No. It is a decision-support baseline calculated from your answers, control status, and framework scope. Certification, legal advice, and regulatory filing decisions still require qualified human review.
Yes. Universal controls and framework mappings are designed to reduce duplicate work. The same practice and evidence can contribute to DPDP, ISO 27001, SEBI CSCRF, or custom frameworks when the mapping and applicability rules allow it.
Assessment generation falls back to deterministic rule output. AI drafts remain assistive, structured, and reviewable; the underlying database-backed framework requirements are authoritative.
Treat an audit pack as a controlled snapshot for a defined audience and purpose. Verify evidence before export, select the appropriate report type, use expiry or revocation controls for sharing, and regenerate when material facts change.
Detailed guides
Expand each section for the full purpose, workflow, outputs, roles, and screens involved.
Getting started
Set up your organization and complete your first readiness assessment.
What it is for
Create the shared context that lets the platform select relevant obligations instead of asking your team to work through an irrelevant checklist.
When to use it
Use this when onboarding a new organization, launching a new framework, or expanding an existing scope to a department, product, geography, or data category.
How it works
What you get
Who operates it
Organization Admin starts the setup; Members contribute answers and evidence; Consultants can run client assessments.
Assessment engine
Turn company context into a prioritized, evidence-backed control plan.
What it is for
Give teams one reusable control model across frameworks, so one piece of evidence or one completed practice can contribute to several compliance outcomes.
When to use it
Use it for gap analysis, recurring compliance reviews, audit preparation, or whenever ownership and due dates are unclear.
How it works
What you get
Who operates it
Members answer controls; Organization Admins approve ownership and dates; Consultants can coordinate client work; auditors consume evidence and reports.
Data governance
Operate the governance workflows needed to understand and protect personal data.
What it is for
Move privacy governance from a static policy exercise into an operating record of what data exists, why it is processed, who touches it, and what happens when rights or incidents arise.
When to use it
Use it whenever a new product, vendor, processing purpose, data location, consent journey, rights request, or incident needs a traceable owner and outcome.
How it works
What you get
Who operates it
Privacy or Governance leads own the records; business and system owners provide facts; Organization Admins control access; reviewers verify evidence and decisions.
Compliance frameworks
Work across DPDP, ISO 27001, SEBI CSCRF, and your own control library.
What it is for
Give each framework its own specialist workspace while keeping shared controls, evidence, people, and remediation connected.
When to use it
Choose a framework workspace when you need framework-specific obligations, registers, reports, calendars, declarations, or certification/submission preparation.
How it works
What you get
Who operates it
Framework owners operate the specialist workspace; Organization Admins manage scope and access; consultants support delivery; auditors receive controlled outputs.
AI Copilot
Use structured AI assistance without losing control of the underlying evidence or rules.
What it is for
Reduce the time spent turning structured governance facts into useful guidance and first drafts, while leaving the final decision with the accountable human owner.
When to use it
Use Copilot when a team needs help answering an assessment, explaining a gap, drafting a policy or record, or converting evidence into a practical roadmap.
How it works
What you get
Who operates it
Members can provide inputs; Organization Admins approve outputs; consultants use drafts for delivery. AI output is assistive and requires human review.
Evidence & audit packs
Collect, verify, export, schedule, and share audit-ready evidence.
What it is for
Create a defensible chain from a control or obligation to the document, link, reviewer, status, and report that proves it.
When to use it
Use it during control operation, internal review, customer due diligence, certification, board reporting, or an external audit.
How it works
What you get
Who operates it
Members upload evidence; Organization Admins and reviewers verify it; auditors consume scoped packs; consultants prepare client-ready deliveries.
Teams & consultants
Coordinate internal owners and deliver governance work across client organizations.
What it is for
Make accountability visible: every unresolved control, evidence request, approval, and client deliverable has a person, status, and next action.
When to use it
Use it for distributed teams, maker-checker processes, recurring reviews, consultant portfolios, or any program where work crosses departments or organizations.
How it works
What you get
Who operates it
Members execute work; Organization Admins govern the organization; Consultants work across assigned clients; Super Admins manage the platform catalog.
Integrations & billing
Connect source systems and manage plans, seats, invoices, and subscriptions.
What it is for
Keep governance data connected to the systems where work happens and make platform access, pricing, and subscription state predictable.
When to use it
Use integrations when evidence or inventory lives in another system; use billing controls when starting a trial, changing plans, managing seats, or reconciling invoices.
How it works
What you get
Who operates it
Organization Admins manage connectors, plans, and billing; Members use connected evidence; platform admins manage catalog and integrations.
Need help?
Start with a free workspace, or talk to us about a consultant rollout, enterprise approvals, or custom framework mapping.