GDPR Compliance

GDPR Health Dashboard

2

ROPA Records

0

DSARs Pending

1

DPAs Signed

0

Breaches (12mo)

Not Appointed

DPO

2/2

Lawful Basis Documented

Records of Processing Activities (ROPA)

Activity	Controller/Processor	Purpose	Legal Basis	Data Subjects	Retention	Actions
Customer Account Management	Controller	Service delivery and account management	Contract	Customers	7 years
Marketing Communications	Controller	Email newsletters and product updates	Consent	Prospects, customers	Until withdrawn

Data Subject Rights (DSAR) Tracker

Request Type	Requester	Date Received	Deadline	Days Left	Status	Notes	Actions
No DSARs logged — click "+ Log DSAR" to add one

Data Processing Agreements

Vendor	DPA Signed	SCCs	Adequacy Decision	Status	Actions
Anthropic	2025-01-01	No (ZDR policy)	No	Current
Supabase	2024-06-01	Yes	No (US → EU SCCs)	Current

Personal Data Breach Register

Discovered	Reported to DPA	Nature	Volume	Consequences	Measures Taken	DPA Notified	Subjects Notified
No breaches logged

🤖 AI Compliance Tools

📄

Draft Privacy Notice

Generate a GDPR-compliant privacy notice tailored to your organisation and data processing activities.

⚖️

Legitimate Interests Assessment (LIA)

Conduct a three-part LIA test for processing activities relying on legitimate interests as the lawful basis.

🔍

Data Protection Impact Assessment (DPIA)

Generate a complete Article 35 DPIA for high-risk processing activities, including risk assessment and mitigations.