Assessment Methodology
One measurement model, eight instruments and a plan generator, scored in the open.
Every DigiWagon tool scores with the same published machinery, so results are comparable and inspectable — while each instrument carries its own dimensions, levels and language. This page documents both halves, and every change to either gets a dated entry below.
Browse the toolsThe shared model
How every instrument scores
Fifteen questions in five dimensions. Every answer maps to 0–3 points by the state it describes — never weighted by who you are, never adjusted by data we don't have.
A worked example
You answer a dimension’s three questions with options worth 2, 1 and 3 points. That dimension scores 6 of 9 — the developing band (4–6). Your other four dimensions score 7, 4, 8 and 5, so your total is 30 of 45, which lands in each instrument’s third level. The radar draws the five dimension scores; the recommendations you see are the ones written for each dimension’s band.
Bands and direction
Each dimension’s score out of 9 falls into one of three bands: 0–3, 4–6 and 7–9. On readiness instruments these read as Gap / Developing / Strength — higher is stronger. On decision instruments the same thresholds carry directional language instead ("Points in-house" / "Could go either way" / "Points to a partner"), because their dimensions point somewhere rather than mature — neither end of a decision scale is a failure.
All five dimensions weigh equally in v1 — deliberately, until real-world results earn differentiated weights. Framework v1 · September 2026.
- No gate. Full results on screen — email is never required to see them.
- Nothing stored. Answers are scored in your browser and never leave the page unless you choose to send them.
- No invented benchmarks. Every number derives from the published rubric and your own answers.
- No price outputs. No instrument estimates cost or effort — tools quantify your decision and your economics, never our rates.
Version history
- v1 · September 2026Initial release: six instruments on one engine — AI Readiness, UX Audit, HIPAA Compliance, MCP Security, In-House vs Outsourcing, Build vs Buy. Equal dimension weights; bands and levels as documented on this page.
- v1.1 · September 2026Two DPDP tools added on 2026-09-11: the DPDP Compliance Checklist, the seventh instrument on the engine, and the DPDP Build Plan — the first plan generator, a published rule table of 26 cited build items in six phases. No scoring change to any existing instrument.
- v1.2 · September 20262026-09-14: the Cloud Readiness Assessment joins the engine as the eighth instrument (vendor-neutral; the first tool for the Cloud & Platform pillar). The engine gained four features for every instrument: a shareable results link that carries the answers in the URL fragment, a score chip for the part just finished, time remaining on the progress bar, and a credibility strip under the frame. Scoring is unchanged.
Readiness instrument
AI Readiness Assessment
Dimensions
- Strategy & Use Cases
- Data Foundation
- Systems & Infrastructure
- Team & Skills
- Governance & Risk
Levels
The full rubric — every question, each option’s points, and what every level means — is published on the tool’s own page.
Take the AI Readiness AssessmentReadiness instrument
UX Audit Scorecard
Dimensions
- First-Run & Onboarding
- Everyday Efficiency
- Clarity & Consistency
- Evidence & Feedback
- Reach & Accessibility
Levels
The full rubric — every question, each option’s points, and what every level means — is published on the tool’s own page.
Take the UX Audit ScorecardReadiness instrument
HIPAA Compliance Checklist
Dimensions
- Administrative Safeguards
- Technical Safeguards
- Physical Safeguards
- Privacy & Patient Rights
- Vendors & Breach Readiness
Levels
The full rubric — every question, each option’s points, and what every level means — is published on the tool’s own page.
Take the HIPAA Compliance ChecklistReadiness instrument
MCP Security Check
Dimensions
- Access & Permissions
- Data Exposure
- Action Safety
- Server Trust
- Oversight & Governance
Levels
The full rubric — every question, each option’s points, and what every level means — is published on the tool’s own page.
Take the MCP Security CheckReadiness instrument
DPDP Compliance Checklist
Dimensions
- Notice & Consent
- Rights & Grievance
- Security & Breach Response
- Data Lifecycle
- Governance & Readiness
Levels
The full rubric — every question, each option’s points, and what every level means — is published on the tool’s own page.
Take the DPDP Compliance ChecklistReadiness instrument
Cloud Readiness Assessment
Dimensions
- Strategy & Business Case
- Applications & Data
- Platform & Operations
- Security & Compliance
- Team, Process & Cost
Levels
The full rubric — every question, each option’s points, and what every level means — is published on the tool’s own page.
Take the Cloud Readiness AssessmentDecision instrument
In-House vs Outsourcing Scorecard
Dimensions
- Team & Capacity
- Speed & Deadlines
- Cost Shape & Commitment
- Control, IP & Risk
- Horizon & Ownership
Dimension bands read Points in-house (0–3) · Could go either way (4–6) · Points to a partner (7–9) — neither end is a failure.
Outcomes
The full rubric — every question, each option’s points, and what every outcome means — is published on the tool’s own page.
Take the In-House vs Outsourcing ScorecardDecision instrument
Build vs Buy Advisor
Dimensions
- Differentiation
- Off-the-Shelf Fit
- Integration & Data
- Economics & Horizon
- Capacity to Own
Dimension bands read Points to buy (0–3) · Could go either way (4–6) · Points to build (7–9) — neither end is a failure.
Outcomes
The full rubric — every question, each option’s points, and what every outcome means — is published on the tool’s own page.
Take the Build vs Buy AdvisorPlan generator
DPDP Build Plan
Not a scored instrument. Ten answers about a product — single- and multi-select, no free text — select items from a published rule table of 26 build items in six phases. Each item carries the duty it satisfies, its citation in the Digital Personal Data Protection Act, 2023 or the DPDP Rules, 2025 as notified, and what gets built; an item the answers say already exists returns as Verify rather than Build. No item carries an effort or a price.
Phases
- Foundations
- Notice & consent
- Rights & grievance
- Security & breach
- Lifecycle & vendors
- Governance & proof
Items are marked Must — duties every Data Fiduciary carries — Applies to you, switched on by the answers, or Recommended; 15 of the 26 are Must.
The full rule table — every item, its citation and what gets built — is published on the tool’s own page, and the legal references are given so each line can be checked; the tool is engineering guidance, not legal advice.
Take the DPDP Build Plan
Questions about how a score was reached?
Every instrument's full question set and options are published on its own page, and every report cites this methodology. If something still doesn't add up, ask us — the rubric only works if you can interrogate it.