Know what changed.Know why it matters.Know what to do.

Regulane registers the regulators whose rules you follow. For each source that is switched on, it flags the published changes that name something your business has: a control, risk, vendor or policy. Each flag shows the exact words that matched. Sources are switched on one at a time, as each publisher's terms of use are confirmed. Underneath is a compliance platform for ISO 27001 and the DPDP Act: controls, evidence, risks, incidents, audits and policies.

Regulane's standout feature. An AI auditor (Anthropic's Claude) interviews each member of staff on the ISO 27001 clauses and Annex A controls they own, one question at a time. It checks every answer against the workspace's own records: control status, evidence and its dates, tasks and the daily check results. Each assessment names the records it rests on, and Regulane confirms each one exists. People find out where what they say and what they can prove part ways before the certification audit does. It gives no score and no pass prediction. For incidents, the same AI drafts the CERT-In six-hour report and the DPDP Act breach notices from the incident record. Every figure is checked against that record.

Vanta and Drata lead on framework breadth and automated evidence collection, and Sprinto is the closest competitor in India. Regulane does not compete on integrations or framework count. It covers Indian regulators that they do not: the RBI, SEBI, MeitY, CERT-In, IRDAI and the MCA. It flags the published changes that name something your business has. Its DPDP Act module is built on the Act's own sections. It also publishes its prices, per workspace rather than per seat.

Once a source is switched on, its feed is checked every 3 to 12 hours, depending on how often that regulator publishes. A new item is read and banded for materiality in the same run. If it is Critical or Elevated for you, your workspace admins and managers are notified then, and by email when it is Critical. Your team then records the actions and owners.

Two today. ISO 27001:2022: all 93 Annex A controls seeded into every workspace on day one, the clause 4-10 management system requirements, and an exportable Statement of Applicability. And the DPDP Act 2023: 17 Data Fiduciary obligations, a processing register and a data principal request queue. SOC 2, GDPR, PCI DSS, HIPAA and NIST CSF 2.0 are on the roadmap.

Nine sources across India, the European Union and the United Kingdom. In India: the Reserve Bank of India, SEBI, MeitY, CERT-In, IRDAI and the Ministry of Corporate Affairs. Beyond it: the European Data Protection Board and the UK Financial Conduct Authority. Seven publish feeds that Regulane reads automatically once each source is switched on. Sources are switched on one at a time, as each publisher's terms of use are confirmed. IRDAI and the MCA publish no feed, so your team records their changes.

Yes. The DPDP module sets out the Data Fiduciary obligations as 17 controls, each referenced to its section of the Act. Your scope switches some on or off: significant data fiduciary, children's data, cross-border transfer. It includes a register of processing activities and a queue for data principal requests. The queue shows the statutory grievance deadline separately from targets you set yourself. DPDP-related changes from Indian regulators also come through regulatory monitoring. It is not legal advice.

The DPDP Act 2023 and the DPDP Rules 2025 were notified on 13 November 2025. The duties of a Data Fiduciary, and the penalties, come into force eighteen months later, on 13 May 2027. Consent manager registration under Rule 4 applies from 13 November 2026. Regulane runs a free DPDP Act check at regulane.com/dpdp-check. It reads your website's privacy notice against DPDP Rules 3, 9 and 14, quotes what it found, and asks the questions a website cannot answer. No sign-up, nothing stored. It measures readiness and is not legal advice.

Monitor is Rs 4,000 per workspace per month and Intelligence is Rs 18,000 per workspace per month. Enterprise is quoted. Pricing is per workspace, never per seat. Monitor includes up to 25 members; Intelligence and Enterprise have no member limit.

Yes. Every new workspace starts on a 14-day free trial, and no card is collected.

No. Regulane is priced per workspace. Monitor includes up to 25 members and Intelligence has no member cap, and an external auditor gets read-only access without taking a seat.

Partly, and the boundary is exact. Regulane connects read-only to GitHub through a GitHub App that reads no source code. Every day it checks two-factor authentication, owners, outside collaborators and branch protection. A Google Workspace connection is built and awaiting Google's verification. Regulane also runs 17 daily checks over your own records in Regulane, such as policy approvals, training completion, supplier assessments and overdue corrective actions. It does not connect to AWS, Azure, GCP or any other cloud infrastructure, and reads no cloud configuration. Everything else is handed in by a person against the evidence request it answers, and Regulane records who and when. If automated evidence from a cloud estate is the main thing you are buying, Vanta, Drata and Sprinto do that and Regulane does not.

In three places, and narrowly, all built on Anthropic's Claude. An assistant answers questions about your own risks, audits, findings, policies, vendors and training. It can also draft training quiz questions from text you provide. It drafts answers to security questionnaires from your published policies and records. Every answer cites the records it rests on. A question nothing in the workspace covers is left blank, and nothing is exported until a person approves it. It also checks a policy document you submit against an ISO 27001:2022 checklist for that kind of document. Every passage it quotes is found in your document by code before it is shown. The coverage percentage is arithmetic over the checklist, not a model score. All three are grounded on the workspace’s own records and instructed never to invent figures. Regulane uses no machine learning, makes no predictions or forecasts, and produces no confidence scores. Regulatory materiality is a transparent rules match, not a model.

Not today. ISO 27001:2022 and the DPDP Act are the frameworks Regulane ships. SOC 2 is on the roadmap. Regulane is also not a certification body — certification is awarded by an accredited body after its own audit, and no software can issue it.

No. Regulane reads no cloud configuration, runs no agents and performs no vulnerability scanning. Its continuous monitoring is daily rule checks over its own records and connected GitHub accounts, not testing of infrastructure. It is a regulatory change monitoring, ISO 27001 and DPDP compliance platform.