ROPA Template (Article 30 GDPR)
Production-ready Records of Processing Activities spreadsheet, with controller + processor variants, field-level guidance, and ready-to-fill examples for SaaS, FinTech, and HealthTech.
Production-ready Records of Processing Activities spreadsheet, with controller + processor variants, field-level guidance, and ready-to-fill examples for SaaS, FinTech, and HealthTech.
Data Protection Impact Assessment template aligned with Article 35 GDPR and ICO methodology. Includes screening questionnaire, full template, and worked example.
Plain-language DPA with EU SCCs (Module 2 + 3), UK IDTA Addendum, and country-specific addenda for India, Brazil, Singapore, Japan.
Pre-drafted Article 33 + Article 34 notification templates for 27 EU DPAs + ICO + ANPD + PDPC + PPC + DPBI. Multi-lingual (EN, DE, FR, ES, PT, JA, KO).
Written mandate, contact-publication snippet, supervisory authority communication, and termination templates for the Article 27 lifecycle.
Article 9 risk-management register for high-risk AI systems. Tracks identified risks, mitigation, residual risk, owner, and review cadence.
End-to-end Data Subject Access Request playbook - intake form fields, identity verification matrix, extraction queries, redaction reviewer checklist.
Section-by-section readiness checklist for India's DPDP Act 2023 + Rules 2025. Includes SDF self-test, consent notice samples, breach notification template.
Open-source React component with category-level granular control, Global Privacy Control honouring, and consent-event dispatch for analytics gating.
Customers get bespoke templates tailored to their exact processing activities and jurisdictions. Tell us what you need.
/public/downloads/ ZIPs) before announcing publicly. The email-capture flow is fully functional and logs to the subscribe endpoint.Compliance templates, checklists and runbooks drafted by practising DPOs — covering records of processing, DPIAs, data processing agreements, breach notification, Article 27 designation and AI Act risk registers.
Yes. These resources are free to use. Note the status notice at the foot of the page, which explains which files are live and which are still being prepared.
Where a download uses email capture, your address is handled as described in our Privacy Policy. You can also take the MIT-licensed versions from our open-source templates without providing any details.
Yes, adapt them to the processing activities and jurisdictions in question. They are starting points and still need legal and factual review before you rely on them.
These are individual free documents. The compliance templates library is broader, organised by framework and compliance area, and includes bundles and custom template support.
Customers can request bespoke templates tailored to their processing activities. Use the request route in the section above.