Confirmed facts
No fact reaches the register unconfirmed
Every answer is confirmed by you before it is used. A required answer that is missing is marked in the document, so a gap is visible instead of filled in with something plausible.
Records of processing
A record of processing for every client, built from facts you confirmed
Interview the client once. The record is assembled from the answers you confirmed and the vendor registry, in your own wording, with anything missing marked instead of guessed.
Free · No sign-up · Up to ten websites
What is a ROPA?
A record of processing activities is the written register Article 30 of the GDPR asks a controller or processor to keep. It is not published: it is kept up to date and shown to a supervisory authority on request.
For a consultant the work is rarely the writing. It is finding out what the client actually does, keeping the register in step with the tools they use, and noticing when a vendor changes so the register stops being true.
What it has to cover
- The purposes of each processing activity and the legal basis relied on
- The categories of people and of personal data involved
- Recipients of the data, including processors and sub-processors
- Transfers outside the EEA and the mechanism each one relies on
- How long each category is kept, and the security measures in place
What changes when it is not done by hand
Vendor rows
Vendor rows come from a registry, not retyping
Legal entity, country, transfer mechanism and the link to the vendor's own data processing agreement are taken from a registry we verify, with the date each entry was checked.
Kept current
The register knows when it stopped being true
When a vendor changes its terms or entity, the documents that depend on that fact are marked out of date, for each client affected.
What you get
Every vendor fact comes from our own registry: 157 vendors with the date each entry was checked.
Built by code, not written by a model
The register's tables are assembled from confirmed facts by ordinary code, so the same facts always produce the same rows.
Your wording for the prose
Firm templates supply the sections your practice already words its own way; the client's facts are filled in.
Gaps marked, never invented
A missing required answer appears as a marked gap with the question to ask, in the document and in the client's progress.
One interview, the whole pack
The same confirmed answers produce the privacy policy, the DPA, the retention schedule and the rest of the pack the regime requires.
Exports under your brand
DOCX and PDF with your logo and no mention of us, ready to send to the client.
Client portal for the questions
Send the client a plain-language link to answer the parts only they know, instead of a spreadsheet.
Get started in three steps
- 1
Add the client and interview once
Answer in the workspace or send the client a link. Each answer is confirmed by you and reused everywhere it belongs.
- 2
Generate the pack
The record and the rest of the documents the client's regimes require are drafted from those answers, with your firm templates applied.
- 3
Check, export, keep it current
Read the draft, export it under your brand, and get told when a vendor change makes part of it out of date.
Questions
- Is the register written by a model?
- No. The tables of the record — vendors, retention, transfers — are built from your confirmed answers by code. A model drafts prose sections only, and never invents a fact that is not in the answers.
- What happens when a required answer is missing?
- The document shows a marked gap with the question to ask, and the client's page lists it. Nothing is filled in with a plausible guess.
- Can I keep my own wording?
- Yes. Firm templates can replace a whole document or a single section, and placeholders such as the client's legal name are filled from confirmed answers.
- Does this give legal advice?
- No. It prepares the documentation a regime requires from facts you confirm. Whether a regime applies, and every legal qualification, stays your decision.
- Who signs it off?
- You do. Nothing is published or sent by us; a document is a draft until you decide it is finished.
Other tasks
See what changed since your clients' policies were written
Enter up to ten client websites. Free, no sign-up, the first report in about a minute.