Regulation maps
Your regulator wrote the brief.
DPDP, RBI, SEBI, IRDAI, MCA audit trail, EU AI Act, ISO/IEC 42001 and NIST AI RMF, mapped to elan1 controls. Free to read, no form.
Last reviewed

Rules index
The rules each page maps to.
- RBI FREE-AI
- RBI model risk (draft)
- SEBI
- IRDAI
- MCA audit trail
- GST e-invoicing
- Labour codes
- DPDP Act
- CERT-In
- ABDM
- ICAI SA 230
- GFR 2017
- RTI Act
- HIPAA
- EU AI Act
- ISO/IEC 42001
- NIST AI RMF
- GST e-invoicing
- Labour codes
- CERT-In
- ICAI SA 230
- GFR 2017
- RTI Act
Mappings are drafts for your counsel and auditors. They are not certification, legal advice or regulator approval.
By industry
6 industry units, rule by rule.
Retail, Consumer and Commerce
| Rule | Mapped to | How |
|---|---|---|
| GST e-invoicing (₹5 crore threshold) and GSTR-1 |
| The agent prepares, a person files. |
| Consumer Protection (E-Commerce) Rules 2020 | Mapped to elan1 controls. | |
| MCA audit trail |
| Govern receipts. |
| DPDP Act 2023 (marketing consent) |
| Mapped to elan1 controls. |
| GDPR and EU AI Act (cross-border sellers) |
| Mapped to elan1 controls. |
Mappings are drafts for your counsel and auditors. They are not certification, legal advice or regulator approval.
Banking, Financial Services and Insurance
| Rule | Mapped to | How |
|---|---|---|
| RBI FREE-AI framework, Aug 2025 |
| Govern receipts. |
| RBI draft model risk guidance, Jun 2026 |
| Govern stop switch, named approvers, receipts. |
| RBI fair practices on recovery |
| Resolve with the collect1 pack. |
| SEBI AI and ML reporting for intermediaries |
| Mapped to elan1 controls. |
| IRDAI Protection of Policyholders' Interests Regulations 2024 |
| Decide routing, Pulse turnaround. |
| DPDP Act 2023 |
| Run, Govern purpose rules. |
| EU AI Act (credit scoring, insurance pricing) |
| Mapped to elan1 controls. |
Mappings are drafts for your counsel and auditors. They are not certification, legal advice or regulator approval.
Healthcare, Wellness and Lifestyle
| Rule | Mapped to | How |
|---|---|---|
| DPDP Act 2023 (main duties from 13 May 2027) |
| Govern purpose rules, Run. |
| ABDM Health Data Management Policy |
| Govern receipts. |
| CDSCO Medical Device Rules 2017 (software in care) |
| Decide suggests, a clinician decides. |
| HIPAA (US patients and partners) |
| Mapped to elan1 controls. |
| EU AI Act (medical AI is high-risk) |
| Mapped to elan1 controls. |
Mappings are drafts for your counsel and auditors. They are not certification, legal advice or regulator approval.
Manufacturing and Distribution
| Rule | Mapped to | How |
|---|---|---|
| MCA audit trail, Companies (Accounts) Rules 2014, Rule 3(1) |
| Act, Govern receipts. |
| Rule 11(g) and Companies Act s.128(5) |
| Govern export. |
| GST e-invoicing and GSTR-1 |
| The agent prepares, a person files. |
| Code on Wages 2019, PF and ESI |
| Act People crew. |
| DPDP Act 2023 |
| Mapped to elan1 controls. |
| EU AI Act (EU subsidiaries and exporters) |
| Mapped to elan1 controls. |
Mappings are drafts for your counsel and auditors. They are not certification, legal advice or regulator approval.
Professional Services and GCCs
| Rule | Mapped to | How |
|---|---|---|
| MCA audit trail, Rule 11(g), s.128(5) |
| Govern receipts and export. |
| ICAI SA 230 Audit Documentation |
| Govern receipts in working papers. |
| ICAI Code of Ethics (confidentiality) |
| Run, Govern access rules. |
| DPDP Act 2023 |
| Mapped to elan1 controls. |
| ISO/IEC 27001, ISO/IEC 42001, EU AI Act (overseas parents and clients) |
| Govern control mappings. |
Mappings are drafts for your counsel and auditors. They are not certification, legal advice or regulator approval.
Public Sector
| Rule | Mapped to | How |
|---|---|---|
| DPDP Act 2023 |
| Run, Govern purpose rules. |
| CERT-In directions 2022 (6-hour reporting) |
| Run, Govern receipts. |
| RTI Act 2005 |
| Govern receipts with reasons. |
| GFR 2017 |
| Govern named approvals on spend. |
| MeitY cloud empanelment |
| Run deployment options. |
| EU AI Act (public services) |
| Mapped to elan1 controls. |
Mappings are drafts for your counsel and auditors. They are not certification, legal advice or regulator approval.
Retail, Consumer and Commerce
| Rule | Mapped to | How |
|---|---|---|
| GST e-invoicing (₹5 crore threshold) and GSTR-1 |
| The agent prepares, a person files. |
| Consumer Protection (E-Commerce) Rules 2020 | Mapped to elan1 controls. | |
| MCA audit trail |
| Govern receipts. |
| DPDP Act 2023 (marketing consent) |
| Mapped to elan1 controls. |
| GDPR and EU AI Act (cross-border sellers) |
| Mapped to elan1 controls. |
Mappings are drafts for your counsel and auditors. They are not certification, legal advice or regulator approval.
Questions
Regulation, plainly.
- Allowed · Approved by Asha R.
- Held for CFO
- Refused · rule 4.2