GDPR
GDPR compliance management
Compliancy helps organisations manage GDPR obligations by holding records of processing activities, lawful bases, data subject request handling, DPIAs, processor agreements and the technical and organisational measures that protect personal data.
What GDPR is
- The EU General Data Protection Regulation (Regulation (EU) 2016/679) governs the processing of personal data of people in the EU and EEA.
- It applies to controllers and processors, including organisations outside the EU that offer goods or services to, or monitor, people in the EU.
- Core duties include lawfulness, transparency, data minimisation, security of processing (Article 32) and accountability (Article 5(2)).
What organisations need to manage
- Records of processing activities (Article 30)
- Lawful basis for each processing activity
- Data subject request handling within statutory timeframes
- Data protection impact assessments where required
- Processor and sub-processor agreements
- Breach detection, assessment and notification readiness
How Compliancy helps
Processing records
Keep processing activities, purposes and lawful bases in structured records rather than a spreadsheet.
Vendor and processor review
Track processors, transfer mechanisms and review dates alongside the controls that depend on them.
Security measures
Connect Article 32 measures to the controls and evidence that show they operate.
Assessments
Run DPIAs and privacy assessments and link outcomes to risks and controls.
GDPR controls21John DoeAdministratorJD
GDPR readiness
AC-04Quarterly user access reviewSarah L.GDPROperating
EN-01Encryption in transit and at restMarcus T.GDPROperating
VN-01Vendor security reviewPriya R.GDPRNeeds review
Reporting
Readiness you can show, not assemble.
Reports21John DoeAdministratorJD
Compliance overview
Track your compliance performance over time.
Last 6 monthsExport
78%Overall▲ 6%
235Policies▲ 12%
48Risks▼ 4%
12Assessments▲ 2
92%Tasks done▲ 8%
Compliance trend
DecJanFebMarAprMay
Compliance by category
78%Compliant
- Compliant 78%
- In progress 15%
- Non-compliant 7%
How it connects to other frameworks
GDPR security measures overlap strongly with SOC 2 and ISO 27001 controls. Privacy-specific duties such as processing records and data subject requests sit alongside them in the same platform.
GDPR questions
Does Compliancy make us GDPR compliant?
No. GDPR compliance depends on how your organisation processes personal data. Compliancy helps you record, manage and evidence that work.
Can Compliancy handle data subject requests?
Compliancy tracks requests as work items with owners and due dates so statutory timeframes are visible.
Does Compliancy provide legal advice?
No. Compliancy is software. Legal interpretation should come from your advisers or DPO.
Related resources
Run GDPR in one place.
Compliancy does not issue reports, certificates or legal advice. It manages the program behind them.