Profile
Every organisation has more data processors than it thinks: the email provider, the bookkeeper, the HR package, the little tool marketing bought on its own.
Each of them should have a data processing agreement in place, and at most organisations that set is incomplete.
The DPA Registrar sets the supplier list against the signed agreements and shows where the gaps are.
What it does, step by step
- Inventory the suppliersFrom accounts payable and from the tools in use.
- Identify the processorsWhich suppliers process personal data, and whose.
- Link the agreementsWhether there is a signed data processing agreement, and of what date.
- Report the gapsProcessors without an agreement, outdated versions and missing sub-processor lists.
- Keep the register up to dateSo the record of processing activities stays current instead of being updated once a year.
Works with these systems
SharePoint
OneDrive- Databases
- Microsoft 365
- APIs
Is your system not listed? We can connect any system, even if there is no standard integration. View all integrations.
What runs automatically and what does not
You stay in control.
Not every decision should be made automatically. For each workflow, we set out:
- What can happen automatically.
- What is put forward for approval first.
- When a person is brought in.
- What information is stored.
- How actions are logged.
Is this a fit for your organisation?
A good fit if
- Organisations with many SaaS suppliers.
- Companies with a GDPR obligation that is currently updated once a year.
- Situations where departments buy their own tools.
Less of a fit if
- Assessing whether a data processing agreement is legally sound.
- Drawing up a DPIA.
What it can deliver
- Insight into which suppliers process personal data.
- Fewer processors without a signed agreement.
- A register that is current instead of an annual catch-up.
Directions, not promises. As soon as there is evidence from a client project, it will appear here as a substantiated result.
Frequently asked questions
How does it know which suppliers process personal data?
It proposes this based on the type of service and puts it forward for review. An accounting package and an HR system are obvious; with a new tool it is a question. The final judgement stays with your data protection officer.
Does it draw up data processing agreements itself?
No. It flags that one is missing and can start the request to the supplier. Assessing the text is legal work.
Does this help with the record of processing activities?
Yes, and above all with keeping it current. Most registers are accurate on the day they are made and not after that, because tools get added that nobody reports.
Does it also see tools that departments have bought themselves?
Often, yes, through accounts payable: something that is charged monthly is usually a service. That is exactly where the unknown processors are.
How to put this to work
- 1A short callTogether we look at your process and your systems, and whether this task is the best place to start.
- 2Set up on your rulesIntegrations with your own systems, and agreeing what may run automatically and what a person approves.
- 3Measure and adjustFirst alongside your team, only then on its own. We look at what it delivers and adjust.