Offsys Intel
Get a free exposure check

Compliance Clock

The regulator's clock starts when you become aware. Become aware first.

When a ransomware group lists your company or a vendor, multiple reporting deadlines may start at once. Offsys Intel tracks them all and keeps the evidence trail you'll need.

Example · fictional match at 02:14 IST
--:--:--remaining
CERT-In6 hours to reportSource ↗
--:--:--remaining
NIS224 h early warningSource: Art. 23 ↗
--:--:--remaining
SEC 8-K4 business daysSource ↗

Demo at 600× speed. Amber under 25% left, red under 10%.

SEC runs from the materiality determination; the demo counts business days as 24 h. Not legal advice.

The deadlines

How fast regulators expect you to act.

RegimeWhoDeadlineSource
CERT-In Directions (India, 2022)Service providers, intermediaries, data centres, body corporates6 hours of noticingCERT-In ↗
NIS2 Art. 23 (EU)Essential & important entities24h early warning, 72h notification, 1-month final reportNIS2 Art. 23 ↗
SEC Item 1.05 Form 8-K (US)US-listed companies4 business days after determining materialitySEC ↗
DPDP Act 2023 (India)Data fiduciariesNotify the Data Protection Board without delay; detailed report within 72 hours. Inform affected individuals without delay.DPDP Rules 2025, Rule 7
SEBI CSCRF / RBI directionsRegulated entitiesReport to the regulator within 6 hours of detection (aligned with CERT-In)CERT-In Directions

This is a summary, not legal advice. Confirm obligations with your counsel.

How it works

Three steps from listing to countdown.

  1. 01
    Add your watchlist

    Your company names, domains and key vendors. We normalise variations automatically.

  2. 02
    A leak-site match fires

    A new listing matches your watchlist. The alert fires and every applicable clock starts counting down.

  3. 03
    See the countdown and evidence

    Your team sees each deadline, the source, timestamps, and a response checklist.

Supplier risk

Their leak can be your incident.

If a vendor processing your data is listed on a leak site, you may need to assess — and possibly report — on your own clock. Offsys Intel watches your entire vendor list, not just your company.

Evidence you can hand to the regulator

  • First-seen timestamp
  • Source (which leak site)
  • Ransomware group
  • What was claimed
  • When we alerted you

Start watching before your clock starts ticking.

Add your company and vendors. We'll alert you the moment a match appears.

Set up a watchlist for free