Data Protection Features / GDPR Suite

GDPR Suite: RoPA, DPIA, and DSAR in one place

A record of processing activities under Art. 30, data protection impact assessments under Art. 35, and a public self-service channel for data subject requests — with AI-assisted drafting and sealed approval.

What is GDPR Suite

Three GDPR obligations, one connected data set.

The record of processing activities (RoPA) under Art. 30 captures role, legal basis, purposes, data categories/subjects, recipients, retention period, and technical/organizational measures. An AI-assisted draft is available; every approval is sealed.

The data protection impact assessment (DPIA) is linked to a RoPA entry: a necessity test, risk assessment, and a conclusion with a documented outcome (proceed / proceed with measures / abandon) — sealed under Art. 35.

For data subject requests, a public self-service channel is available (access, erasure, and more) with internal deadline monitoring under Art. 12–22 and status tracking.

Core capabilities

What the GDPR Suite covers.

RoPA under Art. 30

A complete record with role, legal basis, purposes, data categories, recipients, retention periods, and TOMs; AI-assisted drafting available.

DPIA under Art. 35

Linked to the RoPA entry: necessity test, risk assessment, documented outcome, sealed.

DSAR self-service channel

A public channel for data subjects' access/erasure requests, with internal deadline monitoring (Art. 12–22) and status tracking.

Linked to TOMs/ISO 27001

Technical and organizational measures are linked directly to the ISO/IEC 27001 control catalog instead of being maintained twice.

How it works

From processing activity to answered request.

Log the processing activity

Create a RoPA entry — AI-assisted drafting on request, approval is sealed.

Assess risk

For high risk: a linked DPIA with a necessity test and documented outcome.

Handle requests

Data subjects submit requests through the public channel; deadlines are monitored internally.

Connected regulations

The central building block for GDPR.

GDPR

RoPA, DPIA, and DSAR mapped directly to Articles 30, 35, and 12–22.

Regulation details →
ISO/IEC 27001

TOM assessment seamlessly linked to the Annex A control catalog.

Regulation details →
NIS2 & NISG

Overlapping evidence for technical and organizational measures.

Regulation details →
Next step

RoPA, DPIA, DSAR — sealed, not just claimed.

Start right away with your record of processing activities — including the DSAR channel and TOM linkage.