This is to certify that SecIQ Technologies LLP has performed a DPDPA Compliance Assessment for the uKnowva HRMS ecosystem from 3 March 2026 to 19 October 2026.
Executive Summary
The DPDPA Compliance Assessment evaluated the uKnowva HRMS ecosystem across 25 control parameters covering privacy governance, consent management, data subject rights, security safeguards, data retention, breach handling, and other data protection requirements.
The baseline assessment identified 14 gaps across nine control areas. Following the remediation review, 13 gaps are classified as Remediated, while one gap relating to vendor and client Data Processing Agreements (DPAs) is classified as Not Applicable following discussion with the client. No gaps remain pending remediation.
Scope of Testing
The assessment covered governance and accountability, Privacy by Design, consent management, data subject rights, privacy notices, data inventory, vendor contracts, data transfers, security controls, monitoring, breach handling, data minimisation, retention and disposal, privacy training, and grievance handling.
The in-scope deployment models were the Managed/Hosted Solution, using AWS Mumbai as the primary region and Hyderabad for disaster recovery, and the TSP OEM distribution model. Client-side on-premises environments were excluded.
Findings & Summary
The assessment identified 14 gaps across the 25 controls evaluated. The follow-up remediation review recorded 13 gaps as remediated and one as Not Applicable. The report confirms that no gaps remain pending remediation.
The assessment also records 24 controls as compliant, with one medium-risk gap listed in the findings summary. The item classified as Not Applicable concerns vendor and client DPAs and is subject to retaining the documented rationale and client confirmation.
Business-Critical Risks
The assessment examined privacy and data protection gaps relating to governance, consent, data subject rights, security monitoring, breach notification, retention and disposal, and grievance handling.
Thirteen identified gaps have been remediated. The remaining item has been classified as Not Applicable following discussion with the client. The assessment report recommends retaining supporting documentation and closure evidence to support future audits and ongoing compliance reviews.
Approach
The assessment involved reviewing the uKnowva HRMS ecosystem against 25 defined control parameters, documenting observations and gaps, and reviewing the status of remediation activities.
The review covered technical and organisational safeguards, privacy processes, governance measures, and applicable data protection requirements. The follow-up review recorded the status of the identified gaps, including completed remediation actions and the item classified as Not Applicable.
Assessment Report (Summary)
The DPDPA Compliance Assessment identified opportunities to strengthen privacy governance, consent processes, data subject rights management, monitoring, breach response, retention and disposal procedures, and grievance handling.
The follow-up review confirms that 13 of the 14 identified gaps have been remediated, with the remaining gap classified as Not Applicable following discussion with the client. No gaps remain pending remediation.
The assessment reflects progress in strengthening the uKnowva HRMS privacy compliance programme. Continued evidence retention, periodic reviews of control effectiveness, and reassessment during the next privacy audit cycle will support ongoing DPDPA readiness.
This report is valid until any changes are made in the code or configuration, or six months from the date of testing, whichever is earlier.
If you have any questions or need additional support, feel free to contact us at This email address is being protected from spambots. You need JavaScript enabled to view it..