A single assurance engine that watches, measures and proves
Praman is not a consent-banner tool. It is the infrastructure-and-AI compliance layer: jurisdiction and egress monitoring, PII detection inside AI pipelines, retention enforcement on real systems, and provable audit trails for data-centre operators and the enterprises they host.
Watch
A registry of assets, workloads, AI pipelines and the data flows between them, rendered as a jurisdiction-coloured map. Personal data is classified in-region — never sent to a foreign API.
Measure
A rule engine evaluates your live state against versioned DPDP and CERT-In obligations. Each carries a severity and statutory citation, and runs on a schedule and on demand.
Prove
Every result writes to an append-only, hash-chained audit log the database refuses to alter. One click verifies integrity and exports a regulator-ready Audit Pack.
Modules
Compliance Posture
A live readiness score, open obligations, a countdown to DPDP enforcement, and recent evidence — at a glance.
Assets & Data Map
A registry of systems, pipelines and flows, rendered as a jurisdiction-coloured graph.
Rule Engine
DPDP and CERT-In obligations as versioned data, each evaluated against your live state with its citation.
PII Classifier
In-region detection of Aadhaar, PAN, phone and email — never sent to a foreign API.
Egress Monitor
Every outbound flow classified by jurisdiction and controller, with the foreign-model-API risk called out.
Breach Workflow
Two-tier DPDP notification and the CERT-In 6-hour clock, with editable drafts and full audit logging.
Tamper-Evident Audit Trail
An append-only, hash-chained log with one-click integrity verification.
Audit Pack Export
A regulator-ready PDF plus JSON evidence, carrying its own integrity certificate.
Sovereign by construction
No component requires sending customer data to a foreign-hosted service — the product's own thesis. The PII classifier and every export are dependency-free and in-region, and the whole platform is self-hostable with one docker compose up.
Advisory, never intrusive
Praman observes, issues verdicts, logs and drafts. It never blocks live traffic, never auto-sends regulator notifications, and never deletes your data. Control stays with your team; the evidence stays with the platform.