Compliance
Gap analysis and checklists
Work through the GDPR gap analysis, TOM, ROPA, DSAR, DPIA and domain checklists.
Checklists are guided questionnaires. The first one, the GDPR gap analysis, builds a profile of your company and shows where the GDPR is not met yet. Further checklists build on it. You find them in the Library, under Gap Analyses and Checklists.
| Checklist | Label in the app |
|---|---|
| GDPR gap analysis | GDPR Gap Analysis |
| Technical and organisational measures | TOM (Art. 32) |
| Records of processing activities | ROPA (Art. 30) |
| Data subject access requests | DSAR (Art. 15) |
| Data protection impact assessment | DPIA (Art. 35) |
| Domain checklists | Automotive ADAS Testing, Healthcare & Medical Data, Finance & FinTech, IoT & Smart Devices, HR & Employee Data, E-Commerce & Online Marketing |
Domain checklists are added with Add domain checklist.
Open a checklist
Click a checklist in the Library. It opens as a card with a progress bar ("N/M fields") and the number of sections by state. Click the card to see the sections. Each section shows its own progress, and a KB badge once it is stored in the knowledge base.
Recommended first
Try it
Open the Library and click the gap analysis.
Click the card, then open the first section.
Sections and fields
The gap analysis has sections such as Company Information, GDPR Role Determination, Lawful Basis for Data Collection, Data Categorization, Data Protection Officer, Cybersecurity Measures, Data Inventory & Record of Processing Activities, Data Subject Rights, Data Breach Response and Third-Party Risks & International Data Transfers. The other checklists have their own, for example TOM has Encryption, Access Control and Monitoring & Logging, ROPA has Processing Activities Inventory and Retention & Deletion, and the DPIA has Threshold Analysis, Risk Assessment Matrix and Residual Risk & Decision.
Fields are answered with Yes or No, a selection or free text. Choose Other to type your own answer. Only roles that may update checklists can edit the fields; other roles see them read-only.
In short
Try it
Answer the fields you know.
Select Ask next to a field you are unsure about. The agent answers in the chat.
Good to know
- A field filled by the agent shows "Created by the agent". Edit it or confirm it in the session to validate it.
Ask the agent
At the top of the sections view, Ask opens the agent about the whole checklist. Ask on a field asks about that field. When enough of the gap analysis is filled, the agent offers "Fill complete. Generate the compliance report?" with the buttons Generate the report and Not yet.
Try it
Select Ask at the top of the sections view and describe your situation.
When offered, choose Generate the report.
Knowledge base, translation and drafting
The Knowledge base button stores the sections in the knowledge base, so future agent answers use them. A toast confirms "Stored in knowledge base". Only add content that is correct, because it influences later answers. See Memory.
Translate offers Deutsch, English and 中文. Choose a language to translate the questions, then Apply to take it, or Original to go back.
Configure drafting sets guidance (persona, tone, framework hints) for how Core drafts documents of this family for the team.
Rename and delete
The menu on the checklist card renames it. Delete removes the checklist after a confirmation: all its data and answers are deleted permanently.
Deleting cannot be undone
Good to know
- A checklist needs its package. If it is not installed for your organisation the page says so ("this checklist's package isn't installed for this organisation") and nothing is saved.
- Storing sections in the knowledge base needs the gap analysis first: the app says "Please complete the Gap Analysis checklist first".
- After the gap analysis, create the documents in the Library.