Trust Landscape

The audit trail, policy drafting, and a built-in law library.

Compliance Log

Called "Company Compliance Activity Record." This is the immutable audit trail for your company — every approval, edit, and rejection across evidence, assessments, gaps, vendors, and policies, captured automatically as your team works. It's read-only: you don't add entries here, they appear on their own. Search or filter by Stream / Significance / Outcome to find something specific.

Policy Centre

Draft, review, and publish privacy and security policies — internal or external-facing — with AI assistance. Stats at the top: Published, In Review/Approval, Draft, Review Overdue, Expiring This Month.

Your consultant typically drafts policies here (either Generate with AI — Policy Name, Category, Type, Tone, Applicable Regulations, and any additional context — or manually via Add Policy), then routes them through review. As a customer, watch this page for policies sitting In Review/Approval — that's usually where your input or sign-off is needed before something publishes.

Regulatory Intelligence

Called "Law Repository & Commentary." A built-in legal reference library so you don't have to leave Dutro to check the underlying law. Four sections: Knowledge base (live), and Case Laws, Control Framework, and Penalty Tracker (all marked "Coming soon").

The Knowledge base covers roughly 20 jurisdictions' privacy laws (GDPR, CCPA/CPRA, LGPD, PIPEDA, DPDPA, and more) — currently Indian DPDPA 2023 is the one fully populated (44 sections), with the rest queued. Opening it gives you a full statute reader: browse by Chapter and Section in the left nav, and read the verbatim legal text for each section (Commentary and Decisions tabs are coming soon).