Record of Processing Activities

Do you actually need a record? We answer honestly before selling it to you.

A management tool, not just a formality

The record lists, for each data processing activity you carry out, its purpose, the categories of data and individuals concerned, the recipients, retention periods and security measures.

European Union

Article 30 of the GDPR. The record is mandatory for any organisation employing more than 250 people, and for smaller ones as soon as the processing carries a risk, is not occasional, or involves sensitive data.

Switzerland

Article 12 of the FADP. Companies with fewer than 250 employees are exempt, unless their processing poses a high risk to the individuals concerned. Before selling you this service, we honestly check whether you are actually affected.

What we deliver

  • A preliminary diagnosis to determine whether the record is mandatory in your case
  • A full inventory of all your processing activities
  • A record kept on a collaborative tool, shared with your teams

Let's check together whether you're affected

Thirty minutes, no commitment, for an honest diagnosis.