Compliance guides, explained simply.

RBI Cyber Security Framework: A Complete 2026 Compliance Guide

Everything banks, NBFCs and payment operators need to know about the RBI Cyber Security Framework - controls, VAPT, incident reporting, data localization and how to stay audit-ready.

12 min read

SEBI CSCRF Explained: A Complete Guide for Regulated Entities

A plain-English guide to SEBI's Cybersecurity and Cyber Resilience Framework (CSCRF) - the 5-tier model, who it covers, what it mandates, and how to reach audited compliance.

9 min read

CERT-In Audit Explained: Requirements, 6-Hour Reporting & Empanelment

What a CERT-In audit involves, the 6-hour incident-reporting rule, log-retention obligations, and how CERT-In requirements flow through RBI, SEBI and other Indian regulators.

9 min read

UIDAI AUA / KUA Compliance: Aadhaar Authentication Security Explained

What Authentication User Agencies (AUA) and KYC User Agencies (KUA) must do to meet UIDAI's security and audit requirements for Aadhaar authentication - controls, audits and biometric data protection.

8 min read

IRDAI Cyber Security Guidelines: A Guide for Insurers & Intermediaries

What insurers, reinsurers and insurance intermediaries must do under IRDAI's information and cyber-security guidelines - governance, controls, ISNP audits and periodic assurance.

Accessibility Compliance

6 guides

Digital Accessibility Law in India: RPwD, IS 17802, GIGW, RBI & SEBI

Digital accessibility is now a legal obligation in India. Understand the RPwD Act, the statutory IS 17802 standard, GIGW for government, and the RBI & SEBI accessibility mandates - and how WCAG fits in.

WCAG 2.2 AA Checklist: What to Test and How to Pass

A practical WCAG 2.2 Level AA checklist - the four principles, the new 2.2 success criteria, what to test manually vs automatically, and how to reach and prove conformance.

12 min read

ADA Title II Web Accessibility Deadlines: April 2027 and April 2028

The DOJ extended the ADA Title II web accessibility deadlines by one year. Public entities serving 50,000+ people must conform to WCAG 2.1 AA by April 26, 2027; smaller entities and special districts by April 26, 2028. Here's who is covered and what to do with the extra year.

VPAT and ACR Explained: What Buyers Want and How to Produce One

A VPAT is the template; the completed document is an Accessibility Conformance Report. Which edition to use, what the conformance levels actually mean, how procurement teams read them, and why an honest report wins more deals than an optimistic one.

The European Accessibility Act and EN 301 549: A Guide for Non-EU Businesses

The EAA applies to products and services placed on the EU market - including by companies based outside the EU. What is in scope, how EN 301 549 relates to WCAG, who is exempt, and what non-EU vendors selling into Europe need to have in place.

How to Choose a Digital Accessibility Company in India

What separates a real accessibility audit from an automated scan with a logo on it - the questions to ask a prospective vendor, how Indian mandates (RBI, SEBI, IS 17802, GIGW) differ from global ones, and the warning signs that should end a conversation.

Guides & Frameworks

3 guides

DPDP Act Compliance: A Practical Guide to India's Data Protection Law

The Digital Personal Data Protection Act, 2023 and its 2025 Rules - consent, data-principal rights, breach notification, Significant Data Fiduciary duties, and how to build a compliant program.

PCI DSS v4.0: A Practical Compliance Guide for Card-Handling Businesses

Understand PCI DSS v4.0 - who it applies to, the 12 requirements, SAQ vs QSA assessment, scoping the cardholder-data environment, and reaching Level 1 for banks and payment aggregators.

9 min read

ISO 27001 Certification: What It Takes and How to Pass First Time

A practical guide to ISO/IEC 27001 - what an ISMS is, the Annex A controls, the certification-audit process (Stage 1 & 2), and how to reach certification without wasted effort.