NLNiyamLens Request a scan

DPDP Risk Scanner · for compliance teams

See what your app actually discloses — before a regulator does.

NiyamLens evaluates the externally observable privacy and data-protection signals of an app: permissions against stated purpose, policy-text gaps, third-party SDK disclosures. Evidence-backed risk indicators, not a compliance certificate.

Request a scan See plans

In short

NiyamLens is a DPDP risk scanner for compliance and privacy teams in India. It checks the externally observable privacy signals of an app (permissions against stated purpose, privacy-policy gaps, rights and grievance mechanisms, and third-party SDK disclosures) and reports evidence-backed risk indicators. It never certifies an app as compliant or non-compliant.

What does NiyamLens check?

Four areas: permission-purpose alignment, notice and transparency in the privacy policy, rights and contactability, and third-party SDK disclosures.

Does NiyamLens say whether an app is compliant?

No. It reports observable indicators, potential gaps, risk signals, evidence, confidence and limitations, never a compliant or non-compliant verdict.

Which law is NiyamLens built around?

India's Digital Personal Data Protection Act, 2023 and its 2025 Rules.

How much does NiyamLens cost?

One manual scan is free, with on-device analysis and a full findings report. The Team plan adds bulk scanning, exportable reports, API access and team seats; contact sales for pricing.

What NiyamLens will never do: claim an app is "compliant" or "non-compliant." It reports observable indicators, potential gaps, risk signals, evidence, confidence and limitations — full stop.

What it checks

Permission-purpose alignment

Flags sensitive permissions — contacts, SMS, precise location — against what the app's category and stated purpose would justify.

Notice & transparency

Classifies privacy-policy text, extracts data-purpose pairs, and flags contradictions with cited evidence.

Rights & contactability

Checks for a working access, correction, erasure and grievance mechanism — without demanding a specific job title.

Third parties & SDKs

Surfaces disclosure mismatches as findings, never as an asserted legal violation.

Who it's for

Compliance and privacy teams preparing for India's Digital Personal Data Protection Act, 2023 and its 2025 Rules. Run a free scan yourself; a team plan adds bulk scanning, exportable reports and API access.