STATUTORY POSITIONING & BOUNDARY NOTICE

Scope & Legal Disclaimer

MANDATORY DISCLOSURE SPECIFICATION
PRIMARY REGULATORY NOTICE

WebCompliance provides a preliminary website-level readiness assessment. Automated results are based only on publicly observable website indicators and are not legal advice, statutory certification, or a guarantee of compliance.

A complete compliance assessment may require information about internal processes, systems, vendors, contracts, data flows, retention, security, and evidence. Contact WebCompliance for an in-depth assessment.

1. What The Automated Scanner Inspects

The WebCompliance website scanner inspects only publicly accessible HTTP/HTTPS indicators on the external web surface of target websites. This includes:

  • Public privacy policy links and textual transparency concepts.
  • Public web forms and personal data input fields.
  • Third-party JavaScript tags, tracking pixels, and client-side cookies.
  • Observable cookie banner interface buttons (Accept, Reject, Settings).
  • Basic technical transport security (HTTPS and security response headers).

2. What The Automated Scanner Cannot Inspect

The scanner does not possess visibility into internal organizational processing and therefore makes no claims regarding:

  • Private internal backend databases, data lakes, or analytical pipelines.
  • Employee data processing, human resources practices, or payroll systems.
  • Contracts with third-party vendors or Data Processing Addendums (DPAs).
  • Internal data retention execution and automated deletion scripts.
  • Application layer security, penetration testing, or internal access controls.
  • Actual operational turnaround of grievance redressal complaints.

3. Strict Prohibited Claims

Under no circumstances does WebCompliance or its automated reports claim that an audited organisation is:

  • × “DPDP Certified”
  • × “Fully Compliant”
  • × “Legally Compliant”
  • × “Government Approved”
  • × “Guaranteed Compliant”

4. In-Depth Expert Compliance Option

Organisations seeking an end-to-end evaluation of their compliance with the Digital Personal Data Protection Act, 2023, must engage in a human-led assessment. WebCompliance provides expert advisory services under mutual non-disclosure agreements to review internal data flows, vendor contracts, security architectures, and compliance evidence dossiers.