Security and hosting
A GDPR record describes sensitive data. Dplex hosts it in Europe, limits access by role, exposes the internal record only through a signed link or an allowed network, and calls AI only on your request.
Hosting in Europe
Data hosted and processed in the European Union, TLS-encrypted communications.
Role-based access
Administrator, DPO, contributor, reader: each sees and changes only what is theirs. Organisations are kept separate.
Protected internal record
The full record is reachable only through a signed link valid 7 days or from a network you allow.
Public policy only
The public page exposes only the processing activities marked public, the DPO and the exercise of rights.
AI on request
AI-assisted analysis only runs when you ask for it; the deterministic engine remains the source of truth.
No trackers
Neither the website nor the application sets any advertising or third-party measurement cookie.
Who is responsible for what
Your organisation is the controller of the data it describes and enters in Dplex (record, requests, breaches, interviews, awareness); Klicat, publisher of Dplex, acts as processor within the meaning of the GDPR. For your account data, Klicat is the controller.
Reversibility
The full internal record can be exported at any time as HTML or PDF. At the end of the contract, your data is returned to you in a usable format, then deleted.
Try Dplex on your record
Free, no commitment: describe your first processing activities and see what is missing.