DPO Connect brings the GDPR compliance modules together in one tool. At its centre is a roadmap that tells you where you stand and what is left to do, with proof attached to each requirement.
All the modules below feed a single set of requirements. For each one, you see how far along it is and you attach its proof: at any moment you know where you stand, what is left and in what order to move forward.
The heart of the software: a framework of categorised requirements, each marked “not audited”, “in progress”, “partially met”, “not valid” or “valid”. You always know where you stand, what is left and in what order, and you attach the supporting evidence to each requirement.
A framework of requirements, each with its progress status and its evidence.
The record the law requires you to keep, with both its sections: controller and, if you act on behalf of clients, processor. Purposes, legal bases, retention periods and recipients are entered once and can be exported at any time for an inspection.
Controller (Article 30(1)) and processor (Article 30(2)) sections, in one place.
To map your processing without endless meetings: you launch a campaign, each contact receives a personalised invitation and a guided form, automatic reminders go out before the deadline, and you approve or reject each response. Allow about an hour per contact, once.
Your departmental contacts fill in a guided form, and reminders go out on their own.
A GDPR request form (access, rectification, erasure, portability) you can embed in your website or application. Each request received is categorised and tracked, and the remaining legal time limit is calculated automatically: you no longer miss the one-month deadline without seeing it coming.
A public form to embed on your website, with automatic tracking of the legal deadline.
The most stressful part of the GDPR, properly equipped: nature, origin and causes of the breach, categories of data and data subjects concerned, severity, and the notification decision (no notification required / CNIL notified) with attachments. The breach register, which the law requires for every breach, notified or not, is finally up to date.
The incident record and the decision to notify the CNIL, documented.
List your processors and attach their contractual commitments (Article 28). A shared directory saves you starting from scratch for common providers. It is the document a B2B client will ask you for during an audit.
Your providers and their contracts (Article 28), plus a shared directory.
A dashboard that brings together your progress, deadlines and compliance indicators, a regulatory watch, and alerts when a processing activity or a processor changes. This is what makes compliance sustainable over time, without having to think about it constantly.
Your compliance status at a glance, and an alert when something changes.
Lea is the AI assistant built into DPO Connect. She answers your questions from your own compliance data and helps you fill in your records: useful when you don’t know what to put in a field. Like the rest of your data, she stays hosted in Europe (see our sovereignty commitment).
The artificial intelligence built into DPO Connect, which answers from your own data, hosted in Europe.
DPO Connect also equips and supports you on the topics that prove costly when they are overlooked.
The CNIL’s leading ground for penalties against small organisations. Bringing your cookie banner into compliance and documenting the legal bases of your processing in the record.
Identifying the processing that sends personal data outside the European Union, and putting the right safeguards in place.
Data protection training for your teams, delivered by a Qualiopi-certified training organisation.
Support with the formal notification of your Data Protection Officer’s appointment to the CNIL.
For external DPOs, GDPR consultants and lawyers who manage compliance for several organisations: each one has its own record, dashboard and access rights, and scopes are never mixed.
All your organisations together, with what remains to be done for each.
Each member has their role, and sees only what concerns them.
Described for one organisation, cloned to another, then adapted to its activity.
The general audit follows the same framework everywhere, adjusted to the scope of each organisation.
Your client has access to their organisation, with the role you give them.
Your client takes out their own subscription and takes over their organisation with its full history.
Software first. DPO Connect is the tool that centralises your records, your roadmap and your proof, and lets you manage your own compliance, because the law requires your records to be kept by your organisation: this cannot be delegated. Whenever you wish, our team of experts takes on all or part of the work: it is an option, not a prerequisite.
Book a 30-minute demo: we show you the tool with a case close to yours.