GDPR record for DPOs and compliance leads
The GDPR record that tells you what to do
Dplex keeps the record of processing activities of each organisation, scores its compliance check by check, detects the DPIAs to carry out, tracks data subject requests and breaches, and turns every gap into an assigned task.
One record per organisation: an in-house DPO or a firm following several. Free trial, no commitment.
- French solution
- Multilingual
- Hosted in Europe
- Optional AI
Health data and patients: DPIA required. Proposed retention period: 20 years after the last visit.
The whole record, in one place
Each client organisation has its complete record, kept by its DPO and contributors.
Processing activities
Article 30 record with purposes, legal bases, data, subjects, recipients, retention, measures, and the DPIA section.
Processors
Article 28 contract, guarantees, transfers outside the EU, compliance score recalculated on every change.
Data subject requests
Access, rectification, erasure… with the one-month deadline, extension, identity check and log.
Breaches
The 72-hour countdown, the risk level, notifications to the authority and to data subjects.
Action plan
Every gap becomes an assigned, dated, prioritised, commented task, in kanban or list.
Awareness
Online courses and quizzes, training tracked per employee, renewals.
A compliance engine that scores every processing activity
Checks referenced to GDPR articles, required or recommended, each with the gap and the fix. Optional AI enriches the analysis without ever deciding for you.
- Compliance score per processing activity and for the whole record
- DPIA required, recommended, done or exempted, decided from the criteria
- Reorganisation suggestions: multiple legal bases, duplicates, inconsistencies fixed in one click
- AI opinion: summary, recommendations, proposed retention period, split
- Art. 30 — record
- Art. 6 and 9 — legal bases
- Art. 13 — information
- Art. 28 — processors
- Art. 32 — security
- Art. 33 and 34 — breaches
- Art. 35 — DPIA
- Art. 44 — transfers
Which data do you handle every day?
Discover the processing activities you do not know about
Send a questionnaire to your staff: they describe their activities and tools. Dplex reconciles each answer with the record and offers to create, update or link.
- Invitation and reminders by email, public questionnaire without an account
- Vendors and tools declared by respondents
- Reconciliation with the record, field-by-field differences
- Integration validated by the DPO, record by record
Legal deadlines, kept
A data subject request is handled within one month, a breach is notified within 72 hours. Dplex shows the countdown, records the decisions and keeps the log.
- Deadline computed at receipt, justified two-month extension
- Identity check and time-stamped events
- Breach: 72 hours from discovery, authority and subject notification deduced from the risk
- Justification of a delay kept
From the first processing activity to a living record
The journey in Dplex, step by step.
Create the organisation
Controller, DPO, users and roles.
Describe processing activities
Six-step wizard and templates by domain: payroll, recruitment, customers, website, CCTV…
Ask the teams
Self-interviews to discover what is missing, vendors included.
Analyse
Score, missing checks, DPIAs to carry out, suggestions, AI opinion.
Act
Every gap becomes an assigned task; contributors advance theirs.
Prove
Internal record as PDF, public policy on your website, dashboard.
All features
A complete record, and the tools to keep it alive.
Record of processing activities
The complete Article 30 record, created by wizard or template, continuously scored.
Learn moreCompliance analysis
Referenced checks, a score, suggestions, an AI opinion on request.
Learn moreDPIA
Ticked or deduced criteria, DPIA required or recommended, carried out in the record.
Learn moreProcessors
Contract, guarantees, transfers outside the EU, score recalculated on every change.
Learn moreData subject requests
Computed deadline, extension, verified identity, event log.
Learn moreData breaches
Countdown from discovery, risk level, deduced notifications.
Learn moreAction plan
Kanban or list, assignment, deadline, priority, origin, comments.
Learn moreSelf-interviews
Public questionnaire sent to staff, answers reconciled with the record.
Learn moreOnline awareness
Course and quiz campaigns through a personal link, score and tracking per employee.
Learn moreTraining
Attendees, statuses, scores, dates, periodic renewal.
Learn moreDashboard
Record score, DPIAs to carry out, overdue items, 30-day deadlines, workload per person.
Learn moreExports and public policy
Public policy per controller, DPO contact details, full record through a signed link.
Learn more
For every DPO
In-house or external, public sector, healthcare, non-profit: a record suited to each profile.
In-house DPO
A record to keep, teams to mobilise, a management to convince.
Learn moreExternal or shared DPO
Several clients, several records, one tool.
Learn moreLocal authorities and public sector
Many regulated processing activities, a policy to publish.
Learn moreHealthcare and social care
Sensitive data, systematic DPIAs, many processors.
Learn moreNon-profits
Members, volunteers, donors: a simple record, kept by several people.
Learn more
One price per organisation, no fixed term
Essential from €29 excl. VAT per month for one organisation, Pro from €79 excl. VAT per month for external DPOs following several.
See pricingYour records, well guarded
Hosting in Europe, role-based access, internal record reachable through a signed link or an allowed network, AI only on request.
Security and hostingTry Dplex on your record
Free, no commitment: describe your first processing activities and see what is missing.