Skip to content

GDPR Accountability Snapshot

Free

GDPR Accountability Snapshot

Answer 10 quick questions and see which GDPR role you're in, why the law lets you hold each kind of data, and the written records an authority can ask you to produce. Free.

Expected effort

GDPR rests on one premise: every use of personal data needs a reason the law accepts, and a written record of it. The snapshot works out which reason covers each thing your business does, builds one complete sample record so you see exactly what one looks like, and flags where a formal risk assessment may be needed. It's an automated, indicative preview — a fast way to see where you stand before committing to the full documentation set.

Try it free

Build your snapshot

The EU/EEA country where your central administration sits. Pick "Outside the EU/EEA" if neither applies.
Whose personal data do you mainly handle?
This sets whether you act as a controller, a processor, or both.
Which of these does your business do?Tick every activity that applies. We map each one to its lawful basis and the records it needs.

People & HR

Operations & customers

Security & technology

Pick at least one activity to continue.
Do you handle any special-category data?
Health, biometric, ethnicity, trade-union, religion, sex life or political-opinion data — even occasionally (e.g. sick notes).
Do you send personal data outside the EU/EEA?
For example, a US-hosted CRM, email or cloud tool, or a supplier outside the EU/EEA.
We thread this into your sample record. Legal name only — please don’t add anything else.

Data minimisation: we ask for the legal name only, nothing more. It is used to personalise your sample record and email.

See your full snapshot

Your role, your activity map and a worked sample record — emailed to you, with the method we use. No charge.

We use your email to send you this snapshot and the method behind it. You get it whether or not you tick the box below.

See our Privacy Policy.

Please finish the questions above first.

What you receive

A real result, not a teaser

Trust boundary

This snapshot is an automated indicative review, not legal advice.

What this snapshot does not do

  • It is not legal advice and not a certification of your compliance.
  • It does not validate your individual situation — only the underlying methodology is reviewed, across process, business and legal expertise.
  • It gives you one sample record, not your full documentation set or editable files.
  • Nationally-variable details (retention periods, named authorities) are shown as placeholders.

Related product

Get your complete GDPR Accountability set

Every record for every activity you run, your privacy notices, your assessments — and editable versions you can hand to your team.

See the complete GDPR set

Bridge

One record free today. The full set covers every processing activity — in English, and in Slovak, German, Czech, Polish or French if that’s the language your documentation is in — so you’re ready when an authority or a customer asks to see it.

→ Feeds the GDPR Accountability Documentation

AI Priority Map · Last updated 21 June 2026