Start from a template, not a blank page
Prebuilt questionnaires for privacy, vendor, contractor and employee assessments, plus DPIA templates. Clone one, adapt it to your organisation and send it the same day.
PRIVACY ASSESSMENTS
DPDP Act
Find your privacy risks before they find you
Gap assessments, DPIAs and vendor risk reviews in one module, scored and reported automatically.
Build the questionnaires you need, send them to every team, vendor and contractor, and turn their answers into a clear risk picture and a remediation plan your Board can act on.
1. Collection
2. Processing
3. Sharing
4. Storage
5. Protection
Do you share personal data with sub-processors?
Weight x3
Yes, without a written contractHigh
Yes, under a data processing agreementMedium
NoLow
Is personal data encrypted at rest?
Weight x2
ASSESSMENT RESULTS
High risk · 3 areas
Medium · 5 areas
Low · 12 areas
Top recommendation
Put data processing agreements in place with two sub-processors before the next review.
Every assessment. One module.
From your first gap assessment to annual DPIAs and vendor reviews, Atlas gives you one place to design, send, score and report.
Risk scoring that reflects reality
Weight each question by importance and rate every answer option High, Medium or Low. Atlas adds it up for you.
Maker and checker
A second pair of eyes approves every assessment before it goes out.
Send in bulk
Upload a CSV and reach hundreds of recipients at once.
Reports that write themselves
AI-generated reports summarise how data is collected, processed, shared and protected, then recommend what to fix first.
Evidence, attached
Vendors upload ISO 27001, SOC 2 and policy documents with their answers.
Nothing slips
Automatic alerts for overdue and incomplete assessments.
01DESIGN
Build the assessment your organisation actually needs
A questionnaire designer made for privacy teams, not survey tools.
Create sections and add single-choice, multiple-choice, free-text or file-upload questions. Preview the full assessment exactly as the recipient will see it before you send it. Already have your questions in a spreadsheet? Import them from the standard Excel template. Clone any assessment to reuse it for the next department, the next vendor or next year's review.
Learn more02BRANCH
Ask only the questions that matter
Follow-up questions appear only when an answer calls for them.
Long questionnaires get abandoned. Atlas uses conditional logic so a follow-up question opens only when a respondent picks a relevant answer, and follow-ups can have their own follow-ups. A team that does not share data with third parties never sees the sharing questions. Respondents finish faster, and the answers you get back are more complete.
Learn more03SCORE
A score you can defend to your Board
Weightage by question. Risk by answer. One aggregate view.
Not every question carries the same risk. Assign a weightage to each question so the critical ones count for more, and rate every answer option High, Medium or Low. Atlas calculates the score for each response and rolls it up into an aggregate score for the whole assessment, so you can compare departments, vendors and review cycles on the same scale.
Learn more04REVIEW
Nothing goes out unchecked
Maker and checker approval built into every assessment.
One person builds the assessment, another reviews and approves it before a single recipient sees it. Wrong scoring, missing questions and unclear wording get caught early, and every approval is recorded in the audit log. It is the same discipline your auditors expect, applied to the assessments that feed your compliance evidence.
Learn more05SEND
Reach every team, vendor and contractor
Bulk sending, automatic reminders, full visibility of who has responded.
Upload a CSV of recipients and send an assessment to all of them at once, each with their own secure link. Use it for department heads, employees, contractors and vendors alike. Track completion in real time, and let automated alerts chase overdue and incomplete responses so your privacy team spends its time on the answers, not on follow-up emails.
Learn more06VENDORS
Know the risk every processor brings
Vendor risk assessments from onboarding to annual review.
Under the DPDP Act, you stay accountable for what your Data Processors do with your data. Atlas gives you vendor templates for cloud, on-premise and SaaS providers covering data handling, security posture and legal compliance. Vendors attach evidence such as ISO 27001 or SOC 2 reports, assessments can be triggered at onboarding, recurring reviews are scheduled automatically, and processor agreements are tracked alongside the results.
Learn more07DPIA
DPIAs on schedule, every time
Periodic Data Protection Impact Assessments without the spreadsheet chase.
Significant Data Fiduciaries must carry out a DPIA and an audit periodically under the DPDP Act and Rules. Atlas lets you build DPIA templates around how personal data is collected, processed, shared, stored and protected, mixing quantitative scored questions with qualitative ones. Run the same DPIA each cycle and compare results year on year, with every version and response kept as evidence.
Learn more08REPORT
From answers to an action plan, automatically
AI-generated reports that explain your risk posture in plain language.
Atlas combines assessment responses with contextual privacy knowledge to generate a full report: overall score and risk areas, a summary of how data is collected, processed, shared, stored and protected, your readiness against DPDPA requirements, and recommended remediation steps. Drill into each participant's answers, including how sensitive data is handled, and download everything as PDF or CSV.
Learn more09TRACK
See your compliance improve over time
Interactive dashboards, trend analysis and open APIs.
Each assessment cycle builds on the last. Interactive graphs highlight high, medium and low-risk areas across departments and vendors, and trend analysis shows how your scores move from one cycle to the next. Integration APIs push results into your third-party risk or GRC tools, so assessment data never sits in a silo.
Learn moreFrom questions to a compliance roadmap in four steps
-
01
Design
Pick a template or build your own, then set weightage and risk scores.
-
02
Send
Approve through maker and checker, then send to teams, vendors and contractors in bulk.
-
03
Score
Atlas scores every response and highlights high, medium and low-risk areas.
-
04
Act
Download the AI-generated report and work through the remediation plan.
Not sure where you stand on DPDPA? Start here.
Run a free gap assessment for one department or division on Atlas. You get a scored view of where you stand today and a clear list of what to fix first.
The free offer covers a single department or division. Organisation-wide, multi-department assessments are available as a paid engagement.
Frequently Asked Questions
Everything you need to know about running privacy assessments on Atlas.
Ask us anythingGETTING STARTED
What types of assessments can I run in Atlas?
You can run DPDPA gap assessments, Data Protection Impact Assessments (DPIAs), vendor and processor risk assessments, contractor assessments and employee assessments. Prebuilt templates are available for each, and you can design your own from scratch.
Do I have to build questionnaires from scratch?
No. Start from a prebuilt template and adapt it, clone an assessment you have already used, or import your existing questions from the standard Excel template.
Which question types are supported?
Single-choice, multiple-choice, free-text and file upload. File upload is useful when you need evidence, such as a certificate or a policy document, along with an answer.
Can questions change based on earlier answers?
Yes. Conditional logic opens follow-up questions only when a relevant answer is selected, and follow-ups can have their own follow-ups. Respondents see only what applies to them.
SCORING AND RISK
How is the risk score calculated?
Each question carries a weightage that reflects its importance, and each answer option is rated High, Medium or Low risk. Atlas combines these into a score for every response and an aggregate score for the whole assessment.
Can I compare results across departments or vendors?
Yes. Because every assessment is scored on the same scale, you can compare departments, vendors and review cycles side by side, and use trend analysis to see how scores change over time.
VENDORS AND DPIAS
Why do I need vendor risk assessments under the DPDP Act?
As a Data Fiduciary, you remain responsible for personal data even when a Data Processor handles it on your behalf. Assessing vendors at onboarding and at regular intervals shows that you have checked their safeguards and gives you evidence if something goes wrong.
Can vendors upload certificates and supporting documents?
Yes. Vendors can attach evidence such as ISO 27001 or SOC 2 reports and policy documents directly within their response.
Does Atlas support periodic DPIAs?
Yes. Build a DPIA template once and run it each cycle. Every version and response is retained, which supports the periodic DPIA and audit obligations for Significant Data Fiduciaries.
WORKFLOW AND REPORTING
How do I send an assessment to many people at once?
Upload a CSV of recipients and Atlas sends each person their own secure assessment link. You can track who has completed, who is in progress and who is overdue.
What happens if someone does not respond?
Automated alerts remind recipients about overdue or incomplete assessments, so your team does not have to chase them manually.
What is maker and checker review?
One user creates or edits an assessment and a second user reviews and approves it before it is sent. Every approval is recorded in the audit log.
What do the AI-generated reports include?
An overall risk posture with scores and risk areas, summaries of how data is collected, processed, shared, stored and protected, readiness against DPDPA requirements, and recommended remediation actions. Reports can be downloaded as PDF or CSV.
Can assessment results flow into other tools?
Yes. Integration APIs let you send results to your third-party risk management or GRC tools.
Is there a free option to try this?
Yes. We offer a free gap assessment for one department or division so you can see your current position before committing to a wider rollout.
Trusted by 250+ customers worldwide
