Skip to main content

Free compliance downloads

Templates, checklists, runbooks - drafted by practising DPOs and used in real customer engagements. Drop your email to unlock.

GDPR Art. 3018 pages

ROPA Template (Article 30 GDPR)

Production-ready Records of Processing Activities spreadsheet, with controller + processor variants, field-level guidance, and ready-to-fill examples for SaaS, FinTech, and HealthTech.

.xlsx.csv.json
GDPR Art. 3532 pages

DPIA Toolkit

Data Protection Impact Assessment template aligned with Article 35 GDPR and ICO methodology. Includes screening questionnaire, full template, and worked example.

.docx.pdf.md
GDPR Art. 2828 pages

Data Processing Agreement Template

Plain-language DPA with EU SCCs (Module 2 + 3), UK IDTA Addendum, and country-specific addenda for India, Brazil, Singapore, Japan.

.docx.pdf
GDPR Art. 33–3445 pages

Breach Notification Template Pack

Pre-drafted Article 33 + Article 34 notification templates for 27 EU DPAs + ICO + ANPD + PDPC + PPC + DPBI. Multi-lingual (EN, DE, FR, ES, PT, JA, KO).

.md.docx
GDPR Art. 2712 pages

Article 27 EU Representative Designation Letter Pack

Written mandate, contact-publication snippet, supervisory authority communication, and termination templates for the Article 27 lifecycle.

.docx.pdf
EU AI Act Art. 920 pages

AI Act Risk Register Template

Article 9 risk-management register for high-risk AI systems. Tracks identified risks, mitigation, residual risk, owner, and review cadence.

.xlsx.csv
Cross-framework22 pages

DSAR Pipeline Runbook

End-to-end Data Subject Access Request playbook - intake form fields, identity verification matrix, extraction queries, redaction reviewer checklist.

.md.pdf
India DPDPA18 pages

DPDPA Readiness Checklist

Section-by-section readiness checklist for India's DPDP Act 2023 + Rules 2025. Includes SDF self-test, consent notice samples, breach notification template.

.xlsx.md
GDPR, ePrivacy, CCPA6 pages

Cookie Consent Component (React/Next)

Open-source React component with category-level granular control, Global Privacy Control honouring, and consent-event dispatch for analytics gating.

.tsx.js

Need something custom?

Customers get bespoke templates tailored to their exact processing activities and jurisdictions. Tell us what you need.

Placeholder notice: Downloads are currently placeholders - wire to real seed files (S3, GitHub Releases, or bundled /public/downloads/ ZIPs) before announcing publicly. The email-capture flow is fully functional and logs to the subscribe endpoint.

Frequently Asked Questions

What can I download here?+

Compliance templates, checklists and runbooks drafted by practising DPOs — covering records of processing, DPIAs, data processing agreements, breach notification, Article 27 designation and AI Act risk registers.

Are the downloads really free?+

Yes. These resources are free to use. Note the status notice at the foot of the page, which explains which files are live and which are still being prepared.

Do I have to give my email address?+

Where a download uses email capture, your address is handled as described in our Privacy Policy. You can also take the MIT-licensed versions from our open-source templates without providing any details.

Can I edit and reuse these in client work?+

Yes, adapt them to the processing activities and jurisdictions in question. They are starting points and still need legal and factual review before you rely on them.

How do these differ from the compliance templates library?+

These are individual free documents. The compliance templates library is broader, organised by framework and compliance area, and includes bundles and custom template support.

Can you produce a template we need?+

Customers can request bespoke templates tailored to their processing activities. Use the request route in the section above.