India regulations / Law or regulation

Guidelines for Indian Government Websites and Apps (GIGW 3.0) and STQC certification

Quality, accessibility and security requirements for government websites and apps.

GIGW 3.0 sets requirements for Indian government websites and mobile apps (content, accessibility aligned to WCAG, usability, security and lifecycle management) with compliance certified through STQC. Agencies building government portals need security audits and accessibility testing before launch.

We run GIGW gap assessments, coordinate security audits and help developers fix accessibility and security issues.

Who it is for

  • Government departments and PSUs
  • Agencies building government websites and apps

What you gain

  • Faster launch approvals
  • Accessible, secure public services

How we get you compliant

  1. Applicability and scoping

    Confirm whether and how the law applies to you, entities, data, systems, roles and territories.

  2. Data and process mapping

    Build a record of processing or control inventory so obligations can be tied to real systems and owners.

  3. Gap assessment

    Measure current practice against each obligation and rank the gaps by legal and business risk.

  4. Remediation roadmap

    Policies, notices, contracts, technical controls and governance, sequenced so the highest risks close first.

  5. Evidence and ongoing monitoring

    A compliance calendar, metrics and periodic reviews so you can demonstrate compliance to a regulator or customer at any time.

GIGW & STQC website audit questions

Is a security audit required before hosting?
Government websites are generally expected to undergo a security audit by a CERT-In empanelled auditor before hosting, alongside GIGW compliance.

Ready to start on GIGW & STQC website audit?

Tell us which standard or customer requirement you are facing. In a free 30-minute call we will outline the gaps, a realistic timeline and what it will take to be audit-ready.