Everything loose
Consents in spreadsheets, emails and forms, with no evidence or traceability. When they're asked for, they're nowhere to be found.
Consent capture with evidence, a portal where people exercise their rights, a RAT always up to date and a dashboard that tells you exactly what you're missing.
To full effect: December 1, 2026 · fines of up to 20,000 UTM
Consents in spreadsheets, emails and forms, with no evidence or traceability. When they're asked for, they're nowhere to be found.
People's requests arrive with no process and no legal clock. No one knows what's due or when.
With no RAT, no evidence and no response to data subjects, an inspection hits hard.
Embeddable widget on your site, with date, channel and purpose. Revoking is as easy as granting.
Every decision is logged and sealed. You can prove exactly what each person accepted and when.
People exercise their rights and review their consents, with your brand and in three languages.
Record of Processing Activities: purposes, legal bases and timeframes, with presets by industry.
Status, requests and due dates in a traffic light that tells you what you're missing.
Deadlines of 30 business days plus an extension, and blocking within 2 days. Every request comes in with a reference number.
Every request comes in with a reference number and legal clock, and is answered with a template by right and language.
Know what data of theirs you process.
Correct inaccurate data.
Delete their data.
Stop processing them.
Take them in a reusable format.
Temporary suspension of processing (2 business days).
Your Account Director gets the portal published in all three languages, with at least one active purpose and an end-to-end test. No technical team on your side.
In force on December 1, 2026. Assess your compliance for free with the assessment.
Assess my compliance