Norma.Data-protection compliance for CA firms.
Lets chartered-accountant firms offer DPDP compliance to their small-business clients, with the paperwork drafted for them.
In development· 2026GitHub ↗
Norma
Record of processing
Drafted from the client’s data inventory
✓ Signed · timestamped
- ✓Data inventory
- ✓Consent records
- ✓Impact assessment
The problem
India’s Digital Personal Data Protection Act asks every business to document how it handles personal data. Small businesses will ask their CA for help, and CA firms have no tools for it.
What I built
- A private workspace for each CA firm, with partners and roles.
- Client onboarding: the business gets an email and fills in a guided data inventory.
- Records of processing drafted automatically by AI from that inventory.
- Impact assessments, consent records and counter-signing, each with a timestamped audit trail.
- A learning hub that explains the law in plain language.
How it’s built
Next.js with Prisma on Postgres and session-based auth. Groq-hosted language models draft the compliance documents. The landing page uses React Three Fiber.
- Next.js
- Prisma
- PostgreSQL
- Groq
- React Three Fiber
- Framer Motion
At a glance
- What it is
- Data-protection compliance for CA firms
- Year
- 2026
- Role
- Designed and built solo