Filings & register
Pilot
Guided authorization files, receipt tracking, FR/EN exportable register.
Product
Six modules, one evidence log
Each module produces what an inspection asks for — files, receipts, registers — and feeds the same evidence log. You are not ticking boxes: you are producing records that hold up. Prior-formality filings open where the rules of your law are loaded.
Six modules, and where each one stands
The register, data subject rights and evidence, in one tool
Consent
Pilot
Consent receipts sealed in batches, a hosted preference centre, trackers declared and reviewed by category, domain ownership proven by DNS.
Requests (DSAR)
Pilot
Bilingual public portal, agent-assisted identity checks at the counter, 5-step workflow, delivery written into the chain of proof.
Assessments
Pilot
DPIAs on a 25-point grid (likelihood × severity), triggers derived from the loaded rules, required and missing assessments flagged on the home screen.
Vendors
Pilot
Processor directory with profile completeness, contract lifecycle, and a data annex generated from your register.
Evidence log
Pilot
Every event written to a SHA-256 hash chain, verifiable offline with the supplied script, and a full export of your data at any time.
Four states, read from the code as this page renders, never copied by hand — and a module does not carry them the same way in every country. PLANNED: nothing exists yet, and no subscription unlocks it. ABSENT: nothing opens it in your jurisdiction; filings, for instance, exist only where a rule is loaded. PILOT: the screen, the engine and the tests exist, and limits remain — your workspace names every one of them, for your country, with who holds it: us, a legal source, or a bar-admitted lawyer. AVAILABLE: no known limit left. Each card’s label is the weakest of the capabilities it covers.
Planned connectors — none available yet
SalesforceHubSpotZendeskPostgreSQLSmile IDMicrosoft 365OneTrust / Osano import
Daily penalties
after an unheeded formal notice, up to suspension of activity (art. 54).
Administrative fines
processing without authorization, weak security, unauthorized transfers (art. 55–61).
Criminal penalties
incurred by executives, and by legal entities (art. 63–71).
Penalties set by Law No. 2024/017, art. 54 to 71. The compliance deadline expired on 23 June 2026; the Authority's creation decree is pending, and criminal penalties apply without it. We do not quote a scale that a bar-admitted lawyer has not signed off — it is the rule we apply to all seventeen jurisdictions, and we apply it to ourselves here.