New: a ready-to-use data breach response checklist.New: data breach response checklist.Download the checklist

Data protection, without the weight

GDPR work done with minimal effort.

Step-by-step guides and Excel templates for what lands on your desk: the record the CNPD (Portugal's data protection authority) asked for, the email that went to the wrong person, the customer who writes “delete everything”.

Download the free template Read the guides
Record of processing activities Free template
1 · Identify
2 · Ask
3 · Review
4 · Add
ActivityLegal basisStatus
PayrollLegal obligationReviewed
CCTVLegitimate interestReviewed
RecruitmentTo confirmExample to review

Start from an example

Each kit comes with rows already written for an SME like yours. Delete what doesn't apply, fix the rest and add what's missing.

12 example rows in the record

The source next to the rule

Every deadline and every obligation comes with the GDPR article or the CNPD and EDPB guidance it is based on. You can check everything.

GDPR · CNPD · EDPB

Reviewed, with a date

Each guide says when it was last reviewed and flags what may change soon.

Last reviewed: 23 Oct 2026

Made for people who handle GDPR every day.

SMEs “The CNPD asked for our record. Ours is from 2018.” A record you actually use, built in an afternoon, with one row per purpose. IT and management teams “I sent the customer file to the wrong Ana.” What to do in each of the 72 hours, weekend included. DPOs and consultants “Fourteen clients, fourteen ways of filing things.” One method for everyone's deadlines, advice and evidence.

Every GDPR topic, in one place.

See all guides
Records of processingHow to build yours in an afternoon, with 12 examples already written.Read the guide · 12 min Data breachesWhat to do in the first 72 hours, hour by hour.Read the guide · 12 min Data subject rightsAccess and erasure requests, answered within one month.Read the guide · 13 min DPO with many clientsClients, deadlines and evidence organised with one method.Read the guide · 12 min
Impact assessment (DPIA)When it's required and how to do it.In preparation
AI and data protectionThe AI Act and the GDPR, side by side.In preparation

Resources to move faster.

See all resources
Excel kit · freeRecord of processing activities12 examples, a processor record and a 10-point checklist.
Excel kit · freeData breach response72-hour plan, notification to the CNPD and notice to individuals.
Excel kit · freeAccess and erasure requestsA log with deadlines to the day and seven reply templates.
Excel kit · freeDPO with many clientsClients, capacity, yearly calendar, deadlines and evidence.

A tool to take GDPR off your plate.

It doesn't exist yet, and we won't pretend it does. We're designing it with people who do this work every week. Join the list and help decide what comes first.

Ask for early access
Stay in the loop One email a month: a new guide, a template and what changed at the CNPD and the EDPB.

See how we handle your data in the privacy policy.