One simple price for every module

Documents

• - Data Broker Data Source and Recipient Register
• - Data Broker Registration and DROP Readiness Assessment
• - Deletion, Opt-Out, and Registry Renewal SOP
• - Data Broker Public Notice and Filing Draft Pack

Included

• - Data Broker Workspace for sources, recipients, registrations, and deletion workflows
• - DROP/opt-out readiness checklist with renewal and filing evidence
• - Public notice and filing draft support with review history

Documents

• - PCI DSS CDE Scope and SAQ Type Decision Record
• - PCI DSS SAQ Readiness and Payment Risk Assessment
• - PCI DSS Access, Change, Incident, and Vendor SOP
• - PCI DSS SAQ Assistance, Policy, and Evidence Pack

Included

• - Likely SAQ type decision support and CDE scope record
• - PCI policy, incident, access, change, and vendor AOC checklist
• - SAQ assistance report with remediation gaps and export flow

Documents

• - Algorithmic Pricing Logic and Data Inventory
• - Surveillance Pricing Disclosure and Fairness Risk Assessment
• - Pricing Review, Opt-Out, and Experiment Governance SOP
• - Algorithmic Pricing Consumer Disclosure Pack

Included

• - Pricing Workspace for data inputs, model logic, experiments, and disclosure placement
• - Fairness, opt-out, and vendor evidence checklist
• - Consumer disclosure pack with review notes and export flow

Documents

• - Child Safety Feature, Age Signal, and Data Map
• - Child Digital Safety and Age Assurance Risk Assessment
• - Child Safety Reporting, Escalation, and Appeals SOP
• - Child, Parent, and Safety Notice Pack

Included

• - Child-safety and age-assurance deepener for social, AI, gaming, platform, US, UK, EU, and GCC duties
• - Age signal, child data, parent notice, reporting, appeal, and escalation checklist
• - Child, parent, and safety notice pack with review history

Documents

• - Age Assurance Method and Data Map
• - Age Verification Risk and Jurisdiction Assessment
• - Age-Gate Operations, Appeals, and Vendor SOP
• - Age Verification Notice and Minor Safety Disclosures

Included

• - Age Verification Workspace for methods, vendors, appeals, and jurisdiction records
• - Minor-safety checklist with privacy-preserving age assurance evidence
• - Review notes, audit trail, and export-ready age-gate report pack

Documents

• - AI Companion System, Safety, and Conversation Data Map
• - AI Companion Disclosure, Minor, and Crisis Risk Assessment
• - Crisis Protocol, Human Escalation, and Safety Review SOP
• - AI Companion User Disclosure and Safety Notice Pack

Included

• - AI Companion Workspace for disclosures, minor safeguards, crisis workflows, and safety logs
• - Incident and escalation evidence prompts for companion AI risk review
• - User safety notice pack with audit trail and counsel-review notes

Documents

• - Record of Processing / Personal Data Inventory
• - DPDP Readiness and Risk Assessment
• - Data Principal Rights and Grievance Redressal SOP
• - DPDP Privacy Notice and Consent Language Pack

Included

• - DPDP Workspace for consent, rights, breach, processor, and grievance records
• - DPDP Pack generator for notices, SOPs, and operational evidence
• - India-focused readiness checklist with review history and exports

Documents

• - Transfer Data Map and Vendor Registry
• - Schrems II Transfer Impact Assessment
• - Transfer Governance, DORA Lite, and Counsel Workflow SOP
• - SCC Annex and DPDP-GDPR Transfer Disclosure Pack

Included

• - GDPR Transfers Workspace for TIAs, vendors, SCC annexes, and transfer maps
• - Premium transfer tools for DORA Lite, data mapping, and counsel-ready exports
• - Schrems II gap report with DPDP-GDPR transfer disclosure support

Documents

• - Saudi PDPL Data Map and Processing Register
• - Saudi PDPL Readiness and Transfer Risk Assessment
• - Saudi Privacy Operations, Breach, and Rights SOP
• - Saudi PDPL Notice, Consent, and Rights Pack

Included

• - Saudi PDPL assessment for data maps, notices, rights, transfers, vendors, and breach process
• - SDAIA-aligned evidence prompts and regional privacy operations checklist
• - Saudi notice, consent, rights, and transfer pack with export history

Documents

• - UAE PDPL, DIFC, and ADGM Data Map
• - UAE Privacy DPIA and Transfer Readiness Assessment
• - UAE Rights, Complaint, Vendor, and Breach SOP
• - UAE Privacy Notice and Consent Pack

Included

• - UAE federal, DIFC, and ADGM readiness assessment in one workflow
• - DPIA, transfer, complaint, vendor, and breach evidence checklist
• - UAE privacy notice and consent pack with review notes and exports

Documents

• - GCC Country Data and Vendor Matrix
• - GCC Cross-Border and Residency Risk Assessment
• - GCC Privacy Operations and Regional Review SOP
• - GCC Country Notice and Transfer Disclosure Pack

Included

• - Country-by-country GCC privacy, residency, transfer, vendor, and notice matrix
• - Saudi, UAE, Qatar, Oman, and Bahrain evidence checklist
• - Regional review pack with audit trail and export-ready country matrix

Documents

• - Fintech PCI, AML, and Vendor Control Map
• - Fintech Compliance Lite Gap Assessment
• - KYC, AML, PCI, Complaint, and Incident SOP
• - Fintech Customer Disclosure and Due Diligence Pack

Included

• - Fintech evidence checklist for PCI scope, AML/KYC, sanctions, fraud, vendors, and complaints
• - Partner due-diligence and payment/control evidence pack
• - Customer disclosure, incident, and vendor review workflow

Documents

• - EU AI Act Technical Documentation
• - EU AI Act Risk Assessment
• - Human Oversight Policy
• - AI Transparency and User Disclosure Texts

Included

• - Risk tier classification with obligation mapping
• - Article-linked evidence checklist and dated review record
• - Counsel-review report pack with version history and PDF export

Documents

• - AI Agent Registry and Action/Permission Matrix
• - AI Agent Risk and Governance Gap Report
• - Human Authorization, Incident, Shutdown, and Rollback Framework
• - AI Agent Governance Evidence Register

Included

• - Agent registry, accountable ownership, lifecycle status, systems, vendors, tools, data, identities, and review dates
• - Action/permission matrix plus human authorization and prohibited-actions framework
• - Incident, shutdown, rollback, evidence register, and deterministic risk/gap report with CSV, JSON, and PDF-ready records

Documents

• - Biometric Data Map and Processing Record
• - Biometric Privacy Risk Assessment
• - Biometric Review and Alternative Access Policy
• - Biometric Notice, Consent, and Retention Texts

Included

• - Biometric Kit workspace for notice, consent, retention, and deletion text
• - BIPA/CCPA/GDPR exposure checklist with vendor evidence prompts
• - Review notes, audit history, and export-ready biometric evidence pack

Documents

• - GDPR ROPA and Data Processing Inventory
• - GDPR DPIA and Lawful Basis Gap Assessment
• - GDPR DSR, Breach, Processor, and Retention SOP
• - GDPR Privacy Policy, DPA, Cookie, and Marketing Pack

Included

• - Full GDPR assessment covering ROPA, lawful basis, DPIA, DSR, processors, and transfers
• - Privacy policy, DPA, cookie/marketing, retention, and breach evidence pack
• - Counsel-review checklist with audit trail and export-ready reports

Documents

• - DPP Product Data Inventory
• - DPP Readiness and Missing Data Report
• - Supplier Data Collection and Verification SOP
• - Product Passport Public Disclosure Pack

Included

• - DPP Workspace for product templates, suppliers, materials, and missing fields
• - Supplier submission flow, public passport page, QR, JSON, and PDF exports
• - Registry validation and evidence extraction from uploaded product documents

Documents

• - AI Management System Scope and Inventory
• - ISO 42001 AI Risk and Impact Assessment
• - AI Governance, Monitoring, and Corrective Action SOP
• - AI Use, Transparency, and Stakeholder Communication Pack

Included

• - AI management system assessment for inventory, risk, impact, controls, and monitoring
• - AI governance, corrective action, incident, and management-review evidence checklist
• - ISO 42001 readiness pack for procurement or counsel review

Documents

• - Security Control Inventory and Evidence Register
• - SOC 2 / ISO 27001 Lite Gap Assessment
• - Security Operations, Vendor, and Incident SOP
• - Security Questionnaire and Customer Trust Pack

Included

• - Lite security due-diligence workspace for access, vendors, incidents, cloud, and policies
• - SOC 2 and ISO 27001 gap checklist for enterprise buyer evidence
• - Customer trust pack and security questionnaire support

Documents

• - SOC 2 Control Inventory and TSC Mapping
• - SOC 2 Readiness Score and Gap Report
• - SOC 2 Access, Change, Incident, Vendor, and Continuity SOP
• - SOC 2 Auditor Evidence Checklist and Customer Trust Pack

Included

• - SOC 2 readiness score with Trust Services Criteria mapping
• - Access, change, incident, vendor, continuity, and policy evidence checklist
• - Auditor evidence checklist and customer trust pack

Documents

• - ISO 27001 ISMS Scope, Asset Inventory, and SoA Draft
• - ISO 27001 Risk Assessment and Risk Treatment Plan
• - ISO 27001 Governance, Supplier, Incident, and Audit SOP
• - ISO 27001 Policy Pack and Customer Security Summary

Included

• - ISMS scope, asset inventory, Annex A, and Statement of Applicability draft support
• - Risk assessment, treatment plan, supplier, incident, audit, and governance checklist
• - ISO 27001 policy pack and customer security summary

Documents

• - GCC Cybersecurity Control Crosswalk
• - GCC Cybersecurity Gap and Critical-Sector Risk Assessment
• - GCC Cyber Incident, Access, and Vendor SOP
• - GCC Cyber Customer Evidence Pack

Included

• - GCC cybersecurity control crosswalk for ECC, NESA, NIA, cloud, access, and incident controls
• - Critical-sector gap report with vendor, vulnerability, logging, and data security evidence
• - Customer evidence pack with control matrix and audit trail

Documents

• - CRA Technical Documentation and SBOM Readiness Pack
• - CRA Applicability and Product Classification Report
• - CRA Vulnerability Handling and Article 14 Reporting SOP
• - CRA User Security Information and EU Declaration Pack

Included

• - CRA applicability checker, product classification, and conformity path evidence
• - SBOM, vulnerability disclosure, Article 14 reporting, and secure-by-design checklist
• - Technical documentation, EU Declaration of Conformity, support-period, and EU representative pack