Compliance Hub
The landing page of the Admin Dashboard. The Compliance Hub consolidates the output of every other module into a single view so the DPO and Admin can see compliance health at a glance, act on the most critical issues first, and track progress over time.
Navigate to: Admin Dashboard > Compliance Hub
| Component | What it shows |
|---|---|
| Score Banner | Overall compliance percentage, grade (A to F), and expandable category breakdown. |
| Metrics Row | Four live metrics: Total Users, Consent Rate, Security Alerts, and Compliance Score percentage. |
| Alerts Panel | Active security and compliance alerts requiring immediate attention. |
| Checklist Panel | Action items from data discovery recommendations. Priority-ordered with DPDP Act references. |
| Activity Feed | Real-time log of recent compliance events across all modules. |
| Retention Notification Widget | Tables with data retention policies overdue for review or with rows past their retention window. |
Score Banner
The banner at the top of the page shows your overall compliance score as a percentage and a letter grade. The score is calculated across five categories:
Did you run a scan? Are your tables classified?
What percentage of your users have given consent?
Are DSRs being resolved within SLA?
Do all PII tables have retention policies defined?
What fraction of data discovery recommendations have been actioned?
Each category returns a score (points earned / max points) and a status: good (90%+), warning (50-89%), or critical (below 50%). The overall grade maps as:
| Grade | Score range | Status |
|---|---|---|
| A | 90% and above | Excellent |
| B | 75 to 89% | Good |
| C | 50 to 74% | Needs improvement |
| D | 25 to 49% | Poor |
| F | Below 25% | Critical |
Click the Score Banner to expand a breakdown showing each category's score and the specific findings that reduced it. The banner also shows when the score was last recalculated. Use the Refresh button to recalculate on demand (otherwise the score recalculates automatically when relevant data changes).
A new organisation starts at 0%. Run your first data-discovery scan and upload the report to jump the Data Mapping and Recommendations categories quickly. Install the consent banner on your website to push Consent Coverage upward.
Metrics Row
Four live stat cards across the top of the Hub body:
Total number of users in your connected database. Shows month-over-month growth. Clicking navigates to the user list.
Percentage of users who have accepted consent. Month-over-month change shown. A decline here may indicate a banner visibility problem or a recent change to the banner copy that reduced acceptance.
Count of active security alerts. "All good" in green when zero. Any non-zero count shows "Requires attention" in orange. Clicking navigates to the Security module.
The same overall percentage from the Score Banner, surfaced here for quick comparison. Clicking navigates to the full score breakdown.
Alerts Panel
Active alerts requiring attention. Sources include:
- SLA-breached DSRs or grievances that have not been resolved.
- The Runner is offline, so local DSR and grievance data fetches cannot run.
- Security events detected in the Security module.
- Open breach incidents that have not progressed past "Detected".
Checklist Panel
The most actionable part of the Hub. The checklist is populated directly from the Recommendations output of your latest data discovery scan. Each item corresponds to a specific compliance gap your engineering or legal team needs to fix.
Item structure
| Field | Example |
|---|---|
| Priority | Critical, High, Medium, or Low. |
| Category | Data encryption, Access control, Retention policy, Consent coverage, etc. |
| Title | "Encrypt kyc.aadhaar_number at rest" |
| Description | "Column is classified as Critical PII and is currently stored as plain text." |
| Action | "Apply column-level encryption. Use AES-256. Update the retention policy to reflect the encrypted storage." |
| DPDP reference | The specific DPDP Act section that this item addresses. Example: "DPDP Act §8(5) - Security safeguards". |
| Affected tables | The database table(s) flagged by the scan. Example: ["kyc", "payments"]. |
Checking items off
Expand any checklist item to see its full description, DPDP reference, and affected tables. Once your team has applied the fix in your database or codebase, check the item off in the dashboard. The Recommendations category in the compliance score recalculates.
Checked-off items are recorded with a completion timestamp and the user who checked them. This creates an audit trail proving that compliance actions were taken.
Checking an item off in Privacy Labs does not verify that the fix was actually applied in your database. Run a new scan after fixing a recommendation to confirm the gap is resolved. The scan result is the ground truth.
Summary counter
Above the checklist, a summary row shows the total count of items at each priority level (Critical: N, High: N, Medium: N, Low: N). Critical items are sorted to the top by default.
Activity Feed
A real-time log of compliance events across all modules, displayed in the right column of the Hub next to the Checklist Panel. Events include:
- New consent given, withdrawn, or expired.
- DSR or grievance submitted, updated, escalated, or resolved.
- Database scan completed or failed.
- Compliance score recalculated.
- Data retention alert triggered.
- Breach incident created or status changed.
- Policy published.
- Team member added or role changed.
Retention Notification Widget
At the bottom of the Hub, this widget lists the top 5 database tables with active retention issues:
| Issue type | Meaning |
|---|---|
| No retention policy defined | The table holds PII but no deletion schedule has been set in Privacy Labs. |
| Rows overdue for deletion | At least one row in this table is past the retention window you set. |
| Policy due for review | The retention policy exists but was last reviewed longer ago than the review frequency you configured. |
Clicking a table in the widget navigates to that table's retention detail in the Data & Audit module.
Next up
With the Compliance Hub configured, review the tamper-proof audit log to see a historical record of every consent, DSR, and administrative action.
Audit Logs