GDPR compliance
Register, processors, retention periods, data subject rights, DPIA if needed.
The problem
No register, processors without contracts, customers asking questions.
The solution
A register of processing activities built on the reality of your tools, data processing agreements, retention periods applied, a procedure for requests.
What you get
- Art. 30 register
- Data processing agreements
- Privacy policy and notices
- Procedures
How we measure
- –Processing activities documented
- –Processors under contract
How it works
01
Scoping
One page: situation before, success indicator, data scope, users, go/no-go.
02
Implementation
Configuration or development, integrations, tests with your teams, a demonstration every week.
03
Handover
Training, documentation, access and code handed over. Indicator measured at 30 and 60 days.
Request
Let's talk about “GDPR compliance”.
Describe your situation in a few lines. Reply within one working day, with a 30-minute slot to check that this solution is the right one, and a written fixed price if it is.
In the same family
AI Act compliance
Register of uses, risk qualification, transparency, training plan.
“AI Literacy” training
The AI Act obligation (art. 4) turned into a useful skill.
Process and tool documentation
Everything is in two people's heads: we write it down, to one standard.