The workspace

Product tourThe real screens on a demo practice
Records of processingBuilt from facts you confirmed once
Subprocessor listsFrom a registry we verify ourselves
Vendor registry downloadLegal entities, transfers and DPA links
Portfolio diagnosisTen client websites, no sign-up
Read-only demoA fictional practice with twelve clients

Free checks

Portfolio diagnosisTen client websites against their policies
NIS2 scope checkEssential, important or out of scope, and why
DORA checkDoes DORA apply, from which side, and what it asks
AI Act risk checkThe category a use points to, with the article
Vendor change feedDPA and sub-processor changes, monthly digest
All free checksWhat each one does

Compare

vs. Word templates and spreadsheets
vs. A consent or policy tool
vs. An outsourced DPO service
vs. OneTrust
vs. Copla
vs. iubenda

By task

Records of processing
Subprocessor lists
Data processing agreements
Security questionnaires
Trust pages
Vendor changes
Portfolio diagnosis
Vendor pages
Vendor DPAs

By role

Companies doing their own
Outsourced DPOs
Privacy consultants
Law firms

By regime

GDPR
UK GDPR
EU AI Act
NIS2
DORA

One answer, every regime →

By industry

SaaS
Fintech
Healthcare

Free, no sign-up

Diagnose a portfolio

Check up to ten client websites for what changed since their privacy policy was written.

Scan your clients' websites

Log in Start free trial

Menu

Product

The workspace

Product tour Records of processing Subprocessor lists Vendor registry download Portfolio diagnosis Read-only demo

Free checks

Portfolio diagnosis NIS2 scope check DORA check AI Act risk check Vendor change feed All free checks

Compare

vs. Word templates and spreadsheets vs. A consent or policy tool vs. An outsourced DPO service vs. OneTrust vs. Copla vs. iubenda

Solutions

By task

Records of processing Subprocessor lists Data processing agreements Security questionnaires Trust pages Vendor changes Portfolio diagnosis Vendor pages Vendor DPAs

By role

Companies doing their own Outsourced DPOs Privacy consultants Law firms

By regime

GDPR UK GDPR EU AI Act NIS2 DORA

By industry

SaaS Fintech Healthcare

Scan your clients' websites

Guides Pricing Log in

Loading…

Product

Pricing
Product tour
Read-only demo
Start free trial
Log in

Solutions

Records of processing
Subprocessor lists
Data processing agreements
Security questionnaires
Trust pages
Vendor changes
Portfolio diagnosis

Who it's for

Companies doing their own
Outsourced DPOs
Privacy consultants
Law firms

Regimes

GDPR
UK GDPR
EU AI Act
NIS2
DORA

Resources

Free checks
Topics
Guides
Blog
Changelog
Vendor pages
Countries
Vendor registry download
Website scanner

Compare

vs. Word templates and spreadsheets
vs. A consent or policy tool
vs. An outsourced DPO service
vs. OneTrust
vs. Copla
vs. iubenda

© 2026 clausebenchPrepares documentation. Does not give legal advice.

REALTY.TM GROUP sp. z o.o., ul. Bpa Albina Małysiaka 26/15, 30-389 Kraków, PolandKRS 0001219891 · NIP 6762711607 · REGON 543832177[email protected]Trust center Privacy policy Cookie policy Company details Accessibility statement

clausebench
Countries
European Union

Data protection in European Union

Regime: Not an EU or UK regime country. The GDPR can still apply to organisations here that offer goods or services to people in the EU.
Transfers from the EEA: No EU adequacy decision: transfers from the EEA need a transfer mechanism such as standard contractual clauses.

Sources: European Data Protection Board, members and European Commission, adequacy decisions, checked 2026-09-17.

Vendors registered in European Union

Incident.ioDeveloper tools

Where to go next

The regimes that apply here and the guides that answer what this page raises, worked out from what we have written.

The vendor registryLegal entities, transfer mechanisms and DPA links, checked by a person
Download the registry as a CSVFree, for a spreadsheet
Guides for privacy practicesHow the work is actually done

Prepare documentation for clients in this country

14-day trial, no card required.

Start free trial