MCP App Store
by KeenEthics
Data-Analytics
BitScore — Indian Cyber Regulations icon

BitScore — Indian Cyber Regulations

by BitScore Cybertech LLP

Overview

Ask Claude about Indian cyber and data-protection regulation and get answers computed from BitScore's register of instruments, each read from the issuing regulator's own notification and dated. What it does: - Search and read 32 instruments: the seven RBI Cybersecurity Directions 2026, the nine RBI outsourcing Directions 2025, SEBI CSCRF and its amendments, SEBI LODR, the IRDAI Guidelines 2026, IFSCA's four instruments, the CERT-In Directions and the DPDP Rules. - Work out which instruments bind an entity, from its class, whether it is listed and whether it handles personal data. - List every incident-reporting clock an Indian entity owes (CERT-In's six hours, the RBI, SEBI, IRDAI and IFSCA filings, SEBI LODR) with wall-clock IST due times from the moment of noticing. - The same for the US and EU: SEC Form 8-K/6-K, NYDFS Part 500, the bank 36-hour rule, HIPAA, the FTC Safeguards Rule, NIS2, DORA, GDPR and the Cyber Resilience Act. - Calculate a SEBI CSCRF category from the current thresholds, including the proprietary-broker test in SEBI's June 2025 FAQs. - Summarise aggregate Indian threat activity by sector from the India Cyber Threat Scorecard. Every answer carries its source reference and the date that source was last verified. Read-only, no account needed, nothing stored. Indicative, not legal advice. Built by BitScore Cybertech LLP, an authorised Bitsight partner.

Tools

find_applicable_regulations

Claude
Given an Indian entity class, whether it is listed and whether it handles personal data, returns the cyber and data-protection instruments that bind it, why each applies, a caution where one is commonly misapplied, and its next dated deadline. RBI classes each map to their own 2026 Directions; RRBs and LABs have none, and the result says so.

find_global_cyber_regulations

Claude
For an organisation operating across India, the US and the EU, lists the cyber and data-protection regimes that apply, may apply (check) or are pending, with why and a caution for each. All flags default to false and sizes/sectors to none.

get_instrument

Claude
Full register entry for one instrument by its id (from search_instruments): formal name, reference, issue date, status, who it binds, every dated deadline it sets, the regulator’s own URL and the date it was last re-read there.

india_incident_reporting_deadlines

Claude
Every incident-reporting clock an Indian entity owes — CERT-In six hours, the sectoral regulator (RBI, SEBI, IRDAI, IFSCA), SEBI LODR, NCIIPC, DPDP — each with its trigger, recipient, channel and source clause. Give noticed_at to get wall-clock IST due times. Clocks run in parallel; none discharges another.

india_threat_scorecard

Claude
Aggregate counts of publicly observed cyber threat activity affecting Indian organisations, by industry vertical and category, for one edition (latest by default). Aggregate only: no organisation is named. A vertical the source did not cover is unmeasured, not zero.

search_instruments

Claude
Search every cyber and data-protection instrument binding Indian regulated entities (RBI, SEBI, IRDAI, IFSCA, CERT-In, MeitY/DPDP): reference number, issue date, status, who it binds and the deadlines it sets. Filter by free text, issuer or status. Returns summaries; use get_instrument for one entry in full.

sebi_cscrf_category

Claude
Works out a SEBI regulated entity’s CSCRF category (MII, Qualified, Mid-size, Small-size, Self-certification or Exempt) from the current thresholds, and the obligations that category carries. Call with only entity_type to see which figures it needs. Boundary values the circulars leave uncategorised are reported as such, not guessed.

us_eu_incident_reporting_deadlines

Claude
Incident-reporting clocks under SEC Form 8-K/6-K, NYDFS Part 500, the US bank 36-hour rule, HIPAA, the FTC Safeguards Rule, NIS2, DORA, GDPR and the EU Cyber Resilience Act, each from its own trigger. Give aware_at (and decided_at for materiality/classification clocks) for wall-clock due times.

App Stats

8

Tools

Claude

Platforms

Works with

Claude

Data refreshed daily