Article 30 processing register
Capture your personal data processing activities, lawful bases and retention policies. Record what types of data you’re capturing, where it’s being processed and where you’re collecting it.
Audit and Data Protection Impact Assessments
Use the assessment tool to work out if you need to do a DPIA, run an overall compliance audit and document all processing, related risks and mitigations.
GDPR Articles: 25, 35 and 36
Vendor (processor) manager
Map what personal data you’re sharing with each processor. Document and justify the data transfer outside the EU. Generate and store Data Processing Agreements and risk and compliance analysis against each processor.
GDPR articles: 24, 28, 29 and 46.
Data subject rights manager
Manage incoming data subject requests. Verify the data subject's identity, assign the request to an owner, see where to retrieve the data and do it all within the legal time requirements.
GDPR articles: 12, 13, 14, 15, 16, 17, 18, 19, 20 and 21
GDPR services
GDPR GAP Analysis, GDPR EU Representative, Policy and Privacy Notice Templates
Data Breach Incident Manager
Record and assess the severity of a data breach. Use the guidelines to report it to the ICO and inform impacted data subjects. Record events and actions to mitigate repeats.
GDPR articles: 33 and 34
