ReadyComply
Sign inOpen workspace
Menu
PlatformControlsEvidencePoliciesRemediationAudit trailConnectorsQuestionnaires · NextSOC 2ISO 27001HIPAAGDPRSolutionsStartupsPortfolio companiesResourcesSOC 2 guideISO 27001 guideHIPAA guideGDPR guideSOC 2 checklistISO 27001 checklistHIPAA checklistGDPR checklistWhat this is notFAQPlansAboutSign inOpen workspace

Frameworks · GDPR

Accountability you can point at. Not a privacy badge.

GDPR is a regulation. Supervisory authorities enforce it. ReadyComply instantiates the articles a SaaS team actually has to operate: purposes, rights, processors, security, breaches, transfers. It does not issue an adequacy decision.

Open workspaceGDPR checklist
ReadyComply controls table with Trust Services Criteria codes, owners, and status pills

What GDPR is

Article 5 is the test. The rest is how you prove it.

Lawful, fair, transparent, purpose-limited, minimized, accurate, storage-limited, secure, and accountable. If you cannot show the purpose for a field, you should not keep the field. The register is where that argument lives.

ReadyComply overview: control status, evidence count, and open tasks for Authio LLC

In the workspace

Starter families we instantiate.

Principles and lawfulness

Purposes and a real lawful basis. Consent is not the default for a control plane.

Transparency and rights

A versioned notice, and a path to access, erasure, portability, and the rest.

Records and processors

A dated RoPA and DPAs with anyone who processes for you.

Security, breach, transfers

Article 32 should agree with your SOC 2 and ISO technical story. Transfers need a mechanism, not a hope.

The cycle

What ReadyComply holds for GDPR readiness.

  1. 01

    Name the purposes.

    Each processing purpose on the system, with a basis.

  2. 02

    Publish a current notice.

    Version it in policies. File the live URL.

  3. 03

    Stand up rights handling.

    Who authenticates the requester, who fulfils, how long.

  4. 04

    List processors and transfers.

    Contracts and SCCs in evidence, dated.

  5. 05

    Do not wait for a DPA from us.

    ReadyComply is not your supervisory authority and does not certify you.

Also in the catalog

The other frameworks on this system.

SOC 2

Trust Services Criteria as a readiness register. The report is still a CPA firm.

ISO 27001

ISMS clauses and Annex A themes. Certification is a body, not this product.

HIPAA

Security Rule safeguard families. A BAA and an OCR review are still yours.

Also in ReadyComply

The register around the articles.

Controls

Scope SOC 2, ISO 27001, HIPAA, and GDPR families to each system. Track status, owner, and why something is out of scope.

Evidence

File what you have against a control. Manual upload or a read-only connector.

Policies

Versioned drafts next to the controls they support. Know which text is current.

Read

Guide and checklist.

GDPR checklist

Purposes, RoPA, rights, processors, transfers.

Write the purposes before you add another processor.

Sign in. GDPR families instantiate with the system. Fill the RoPA in.

Sign in