--- title: "Online GDPR record for DPOs | Dplex" description: "Keep a living GDPR record: scored processing activities, DPIA, processors, data subject requests, breaches within 72 hours, action plan, self-interviews…" url: https://dplex.eu/en/ language: en --- GDPR record for DPOs and compliance leads # The GDPR record that tells you what to do Dplex keeps the record of processing activities of each organisation, scores its compliance check by check, detects the DPIAs to carry out, tracks data subject requests and breaches, and turns every gap into an assigned task. [Free trial](https://app7.dplex.eu)[How it works](https://dplex.eu/en/how-it-works) One record per organisation: an in-house DPO or a firm following several. Free trial, no commitment. - French solution - Multilingual - Hosted in Europe - Optional AI ## The whole record, in one place Each client organisation has its complete record, kept by its DPO and contributors. ### Processing activities Article 30 record with purposes, legal bases, data, subjects, recipients, retention, measures, and the DPIA section. ### Processors Article 28 contract, guarantees, transfers outside the EU, compliance score recalculated on every change. ### Data subject requests Access, rectification, erasure… with the one-month deadline, extension, identity check and log. ### Breaches The 72-hour countdown, the risk level, notifications to the authority and to data subjects. ### Action plan Every gap becomes an assigned, dated, prioritised, commented task, in kanban or list. ### Awareness Online courses and quizzes, training tracked per employee, renewals. ## A compliance engine that scores every processing activity Checks referenced to GDPR articles, required or recommended, each with the gap and the fix. Optional AI enriches the analysis without ever deciding for you. - Compliance score per processing activity and for the whole record - DPIA required, recommended, done or exempted, decided from the criteria - Reorganisation suggestions: multiple legal bases, duplicates, inconsistencies fixed in one click - AI opinion: summary, recommendations, proposed retention period, split - Art. 30 — record - Art. 6 and 9 — legal bases - Art. 13 — information - Art. 28 — processors - Art. 32 — security - Art. 33 and 34 — breaches - Art. 35 — DPIA - Art. 44 — transfers [Compliance analysis](https://dplex.eu/en/features/compliance-analysis) ## Discover the processing activities you do not know about Send a questionnaire to your staff: they describe their activities and tools. Dplex reconciles each answer with the record and offers to create, update or link. - Invitation and reminders by email, public questionnaire without an account - Vendors and tools declared by respondents - Reconciliation with the record, field-by-field differences - Integration validated by the DPO, record by record [Self-interviews](https://dplex.eu/en/features/self-interviews) ## Legal deadlines, kept A data subject request is handled within one month, a breach is notified within 72 hours. Dplex shows the countdown, records the decisions and keeps the log. - Deadline computed at receipt, justified two-month extension - Identity check and time-stamped events - Breach: 72 hours from discovery, authority and subject notification deduced from the risk - Justification of a delay kept [Data breaches](https://dplex.eu/en/features/data-breaches) ## From the first processing activity to a living record The journey in Dplex, step by step. - 1 ### Create the organisation Controller, DPO, users and roles. - 2 ### Describe processing activities Six-step wizard and templates by domain: payroll, recruitment, customers, website, CCTV… - 3 ### Ask the teams Self-interviews to discover what is missing, vendors included. - 4 ### Analyse Score, missing checks, DPIAs to carry out, suggestions, AI opinion. - 5 ### Act Every gap becomes an assigned task; contributors advance theirs. - 6 ### Prove Internal record as PDF, public policy on your website, dashboard. ## All features A complete record, and the tools to keep it alive. - [Record of processing activitiesThe complete Article 30 record, created by wizard or template, continuously scored.Learn more](https://dplex.eu/en/features/record-of-processing-activities) - [Compliance analysisReferenced checks, a score, suggestions, an AI opinion on request.Learn more](https://dplex.eu/en/features/compliance-analysis) - [DPIATicked or deduced criteria, DPIA required or recommended, carried out in the record.Learn more](https://dplex.eu/en/features/dpia-impact-assessment) - [ProcessorsContract, guarantees, transfers outside the EU, score recalculated on every change.Learn more](https://dplex.eu/en/features/processors) - [Data subject requestsComputed deadline, extension, verified identity, event log.Learn more](https://dplex.eu/en/features/data-subject-requests) - [Data breachesCountdown from discovery, risk level, deduced notifications.Learn more](https://dplex.eu/en/features/data-breaches) - [Action planKanban or list, assignment, deadline, priority, origin, comments.Learn more](https://dplex.eu/en/features/action-plan) - [Self-interviewsPublic questionnaire sent to staff, answers reconciled with the record.Learn more](https://dplex.eu/en/features/self-interviews) - [Online awarenessCourse and quiz campaigns through a personal link, score and tracking per employee.Learn more](https://dplex.eu/en/features/online-awareness) - [TrainingAttendees, statuses, scores, dates, periodic renewal.Learn more](https://dplex.eu/en/features/training) - [DashboardRecord score, DPIAs to carry out, overdue items, 30-day deadlines, workload per person.Learn more](https://dplex.eu/en/features/dashboard) - [Exports and public policyPublic policy per controller, DPO contact details, full record through a signed link.Learn more](https://dplex.eu/en/features/exports-public-policy) ## For every DPO In-house or external, public sector, healthcare, non-profit: a record suited to each profile. - [In-house DPOA record to keep, teams to mobilise, a management to convince.Learn more](https://dplex.eu/en/in-house-dpo) - [External or shared DPOSeveral clients, several records, one tool.Learn more](https://dplex.eu/en/external-shared-dpo) - [Local authorities and public sectorMany regulated processing activities, a policy to publish.Learn more](https://dplex.eu/en/local-authorities-public-sector) - [Healthcare and social careSensitive data, systematic DPIAs, many processors.Learn more](https://dplex.eu/en/healthcare-social-care) - [Non-profitsMembers, volunteers, donors: a simple record, kept by several people.Learn more](https://dplex.eu/en/non-profits) ## One price per organisation, no fixed term Essential from €29 excl. VAT per month for one organisation, Pro from €79 excl. VAT per month for external DPOs following several. [See pricing](https://dplex.eu/en/pricing) ## Your records, well guarded Hosting in Europe, role-based access, internal record reachable through a signed link or an allowed network, AI only on request. [Security and hosting](https://dplex.eu/en/security-hosting) ## Try Dplex on your record Free, no commitment: describe your first processing activities and see what is missing. [Free trial](https://app7.dplex.eu)[See pricing](https://dplex.eu/en/pricing)