I built Anaya to solve a problem I kept seeing: India's DPDP Act is now enforceable (rules notified Nov 2025, deadline May 2027) but compliance is a code problem, not just a legal checklist. No tooling existed for it. Ran it on Saleor (open-source Django e-commerce, 107 models): found 4 violations in 82 seconds — no consent mechanism, 70 PII fields stored plaintext, zero DELETE endpoints for any PII model.

pip install anaya && anaya compliance .

Code: https://github.com/sandip-pathe/anaya-scan

Happy to discuss the AST parsing approach or the DPDP section analyser design.