Governance and evidence
Processor Oversight and Impact Assessment
Keep every processor on record under a valid contract and assess higher risk processing, shown through a diagnostics chain.
A diagnostics chain shares patient data with a cloud host, a courier and an SMS provider. Under the DPDP Act the organisation stays responsible for what its processors do and may engage them only under a valid contract.
TrustOS keeps every processor on record with services, responsibilities, contract references and review history. For higher risk processing, teams document the impact on people, assign remediation and keep the review decision, so risk decisions and approvals stay traceable from assessment to closure.
Key points
- Responsibility for processors
- Processor records and reviews
- Impact assessment workflow
- Traceable risk decisions
Transcript
Your diagnostics chain shares patient data with a cloud host, a courier and an SMS provider. Under the DPDP Act, you stay responsible for what your processors do, and you may engage them only under a valid contract. TrustOS keeps every processor on record, with services, responsibilities and contract references, and logs each review. For higher risk processing, you document the impact on people, assign remediation and keep the review decision. Risk decisions and approvals stay traceable, from assessment to closure.
See it with your data
Show us where your personal data lives. We will show you TrustOS running on it.
A 30 minute walkthrough on Google Meet with someone who knows the Act and the product. You leave with a view of your first phase, the owners and the effort.
Or get a rollout proposal in two minutes- Step 1A 30 minute demo on Google MeetWith someone who knows the Act and the product.
- Step 2Your systems and purposesWe walk one product's personal data through TrustOS.
- Step 3A first phase you can planModules, owners and effort, written down for you to keep.