Sell dataRequest data

The status ledger.

Status per framework and law. A circle only fills when the work is done and evidenced.

#Framework or lawApplies toLaunch status
01India DPDP Act 2023 and DPDP Rules 2025Indian personal data in source systemsIn progressRules notified 13 Nov 2025; core obligations from 13 May 2027
02HIPAA (de-identification standards)US health dataApplied per datasetSafe Harbor or Expert Determination, named in each dataset's de-identification report
03GDPREU data, if anyPlanned
04SOC 2 Type IIQuarry's own controlsPlanned
05ISO 27001Quarry's own controlsPlanned

DPDP dates per AZB & Partners. The DPDP Rules don't settle whether training AI models counts as research, so Quarry relies on no research exemption.

Five frameworks, one stack.

Open the stack at a frame and its framework lights beside it: top frame, top row.

  1. India DPDP Act 2023 and DPDP Rules 2025In progress
  2. HIPAA (de-identification standards)Applied per dataset
  3. GDPRPlanned
  4. SOC 2 Type IIPlanned
  5. ISO 27001Planned

India's DPDP framework, on one line.

The one framework with dates that bind Quarry's owners today, from the Act to the day its core obligations apply.

2023202420252026202720282023DPDP Act13 Nov 2025Rules notified13 May 2027Core obligations applyAs of 15 Oct 2026
2023: The Digital Personal Data Protection Act, 2023. 13 Nov 2025: The DPDP Rules 2025 are published. 13 May 2027: The date the core obligations apply. Dates per AZB & Partners.

Reading the glyphs

Compliant
In place and evidenced.
In progress
Work under way; the obligation or audit is not yet complete.
Planned
Committed, not started.
Not applicable
Does not apply to the data Quarry handles.
Applied per dataset
A standard met dataset by dataset, and named in each dataset's de-identification report.
Last updated 15 October 2026Questions? trust@quarrydata.ai