All templates are MIT-licensed and accept contributions. Open an issue if you spot a regulatory update we should incorporate.
Article 30 GDPR Records of Processing Activities - production-ready spreadsheet + JSON schema. Includes Controller and Processor variants and field-level guidance.
Data Protection Impact Assessment templates aligned with ICO methodology and Article 35 GDPR. Markdown + Word document + decision tree.
Plain-language Data Processing Agreement with EU SCCs Module 2 + 3 and UK IDTA Addendum. Drop-in clauses for sub-processors, audit, breach.
Pre-drafted Article 33 + 34 notification templates for 27 EU Supervisory Authorities + ICO + ANPD + PDPC + PPC + DPBI. Multi-lingual.
Designation letter, contact-publication snippet, and supervisory authority communication templates for Article 27 EU Representative arrangements.
Open-source React component for GDPR-/ePrivacy-compliant cookie consent with category-level granular control and Global Privacy Control honouring.
Section-by-section readiness checklist for India's DPDP Act 2023 + Rules 2025. Includes SDF criteria self-test and consent notice samples.
Notice-at-collection, financial-incentive notice, opt-out flow specs, and Global Privacy Control reference implementation.
Open an issue on the org page. We add new templates whenever a new framework gets published or our customers ask for one.
They are MIT-licensed, so you can use, adapt and redistribute them — including commercially — provided the licence notice is retained.
Yes. The MIT licence permits commercial use. You remain responsible for tailoring each document to the processing activities, systems and law that apply.
Yes. The templates accept contributions, and you can open an issue on the organisation page to request one that does not exist yet. Note the status notice at the foot of this page about the repository's current state.
These are version-controlled repositories you can fork and track upstream. The free downloads page offers packaged files for one-off use without any tooling.
They are maintained by the RegulatoryBridge team, with changes made in the open so you can see what changed and when before pulling an update.
For documents tailored to your specific processing and jurisdictions, talk to us — bespoke templates are part of a customer engagement rather than the open-source set.