---
title: "How Dplex works: the living GDPR record"
description: "One record per organisation, a compliance engine that scores every processing activity, staff interviewed and trained, an action plan."
url: https://dplex.eu/en/how-it-works
language: en
---

# How Dplex works

One record per organisation, a compliance engine that says what is missing, staff interviewed and trained, an action plan to move forward. Dplex is designed for the DPO who keeps one record, and for the firm that keeps thirty.

## The compliance cycle

What Dplex keeps running, quarter after quarter.

- 1

### Describe

Processing activities, through the guided wizard, templates or self-interviews.

- 2

### Score

The engine checks every record: required at 75%, recommended at 25%.

- 3

### Assess

DPIA criteria are ticked or deduced; the DPIA is carried out in the record.

- 4

### Fix

Every gap becomes an assigned task, followed until closed.

- 5

### Raise awareness

Online courses and quizzes, training tracked per person.

- 6

### Prove

Internal record, public policy and dashboard, always up to date.

## What a Dplex record contains

### Controllers

The organisation and its DPO, with the public policy and the full record exportable per controller.

### Processing activities

The complete Article 30 record, the score, the DPIA section, the origin (wizard, template, interview) and the review date.

### Processors

Contract, guarantees, transfers, linked to processing activities; score recalculated on every write.

### Requests and breaches

Cases with legal deadlines, with their log and tasks.

### Campaigns

Discovery self-interviews and awareness campaigns, with their sessions per employee.

### Team

Administrator, DPO, contributors and readers, each with their rights.

## The compliance engine

Deterministic, referenced, explainable: every check cites its article, describes the gap and proposes the fix.

- Checks on Articles 30, 6, 9, 13, 28, 32, 35 and 44, at two levels
- Score per processing activity, per processor and for the record
- DPIA: ticked and deduced criteria (sensitive data, vulnerable persons, employees included)
- Suggestions: several legal bases, multiple purposes, mixed populations, minimisation, duplicates by name similarity
- One-click fix when the record contradicts itself
- AI (Gemini) only on request: summary, recommendations, DPIA opinion, retention period, split, rewording

## Who does what

Rights by role, and tasks anyone can advance.

- 1

### Administrator

Account, users, subscription, and the whole record.

- 2

### DPO or compliance lead

Keeps the record, handles requests and breaches, drives the action plan, runs interviews and training.

- 3

### Contributor

Sees the dashboard and advances the tasks assigned to them: status, comment.

- 4

### Reader

Views the dashboard, without changing anything.

## Frequently asked questions

### Do I have to start from scratch if I already have a record?

No: processing activities are created with the wizard or templates, and self-interviews bring up the rest. The Dplex team helps with taking over an existing record.

### Does the AI decide on compliance?

No. The deterministic engine scores every record against referenced checks; AI only steps in when you ask, to enrich the analysis or reconcile interview answers, and every proposal is validated by the DPO.

### Can a firm keep the record of several clients?

Yes: each client organisation is a separate record, with its users. The Pro plan covers several controllers and unlimited processing activities.

### Do my staff need an account?

To answer a self-interview or follow an awareness course, no: a personal link is enough. To advance tasks, a contributor account.

## Try Dplex on your record

Free, no commitment: describe your first processing activities and see what is missing.

[Free trial](https://app7.dplex.eu)[See pricing](https://dplex.eu/en/pricing)