GRC Oversight

Live demoFictional sample data. Nothing is saved.

Sign up

24Privacy

RoPA

GDPR Art. 30 records of processing activities — the register your DPA expects on request, kept current as new processing activities are added.

Processing activities (3)

ActivityRoleLawful basisData categoriesRetentionRecipients
Customer support ticketing
Respond to and resolve customer support requests.
CONTROLLERContractContact details, Support tickets, Account metadata24 months after account closureZendesk (support platform vendor)
Payroll processing
Pay employees and contractors and meet tax obligations.
CONTROLLERLegal obligationName, Bank details, Tax ID7 years (statutory)Gusto (payroll provider), tax authorities
Product analytics
Understand feature usage on behalf of customers to improve the product.
PROCESSORLegitimate interestUsage events, Device identifiers13 monthsAmplitude