How Dplex works
One record per organisation, a compliance engine that says what is missing, staff interviewed and trained, an action plan to move forward. Dplex is designed for the DPO who keeps one record, and for the firm that keeps thirty.
The compliance cycle
What Dplex keeps running, quarter after quarter.
Describe
Processing activities, through the guided wizard, templates or self-interviews.
Score
The engine checks every record: required at 75%, recommended at 25%.
Assess
DPIA criteria are ticked or deduced; the DPIA is carried out in the record.
Fix
Every gap becomes an assigned task, followed until closed.
Raise awareness
Online courses and quizzes, training tracked per person.
Prove
Internal record, public policy and dashboard, always up to date.
What a Dplex record contains
Controllers
The organisation and its DPO, with the public policy and the full record exportable per controller.
Processing activities
The complete Article 30 record, the score, the DPIA section, the origin (wizard, template, interview) and the review date.
Processors
Contract, guarantees, transfers, linked to processing activities; score recalculated on every write.
Requests and breaches
Cases with legal deadlines, with their log and tasks.
Campaigns
Discovery self-interviews and awareness campaigns, with their sessions per employee.
Team
Administrator, DPO, contributors and readers, each with their rights.
The compliance engine
Deterministic, referenced, explainable: every check cites its article, describes the gap and proposes the fix.
- Checks on Articles 30, 6, 9, 13, 28, 32, 35 and 44, at two levels
- Score per processing activity, per processor and for the record
- DPIA: ticked and deduced criteria (sensitive data, vulnerable persons, employees included)
- Suggestions: several legal bases, multiple purposes, mixed populations, minimisation, duplicates by name similarity
- One-click fix when the record contradicts itself
- AI (Gemini) only on request: summary, recommendations, DPIA opinion, retention period, split, rewording
Health data and patients: DPIA required. Proposed retention period: 20 years after the last visit.
Who does what
Rights by role, and tasks anyone can advance.
Administrator
Account, users, subscription, and the whole record.
DPO or compliance lead
Keeps the record, handles requests and breaches, drives the action plan, runs interviews and training.
Contributor
Sees the dashboard and advances the tasks assigned to them: status, comment.
Reader
Views the dashboard, without changing anything.
Frequently asked questions
Do I have to start from scratch if I already have a record?
No: processing activities are created with the wizard or templates, and self-interviews bring up the rest. The Dplex team helps with taking over an existing record.
Does the AI decide on compliance?
No. The deterministic engine scores every record against referenced checks; AI only steps in when you ask, to enrich the analysis or reconcile interview answers, and every proposal is validated by the DPO.
Can a firm keep the record of several clients?
Yes: each client organisation is a separate record, with its users. The Pro plan covers several controllers and unlimited processing activities.
Do my staff need an account?
To answer a self-interview or follow an awareness course, no: a personal link is enough. To advance tasks, a contributor account.
Try Dplex on your record
Free, no commitment: describe your first processing activities and see what is missing.