What is GDPR?
EU General Data Protection Regulation. Any organisation processing personal data of EU residents: SaaS vendors, e-commerce, healthcare, finance, public sector, education.
Who needs to comply
- B2B SaaS companies serving EU customers
- Health-tech, fintech and edtech with sensitive personal data
- E-commerce and marketing operators handling EU consumer data
- Public-sector and non-profit organisations under GDPR scope
Key GDPR controls covered by Dazr
Article 6, 9Lawful basis records and special-category checks per processing activity.
Article 28Vendor and sub-processor register with DPA URLs and review dates (Pro and Enterprise).
Article 30Records of processing activities as a register, linked to the vendors involved.
Article 32Technical and organisational measures, with controls shared with ISO 27001 if both are enabled.
Article 33-34Breach register with regulator-notification fields and 72-hour clock.
Article 35DPIA register linked to processing activities and risks, plus a recurring review.
What auditors look for
Supervisory authorities sample evidence: ROPA is up to date, breach register exists and is populated, sub-processor changes follow notice, DPIAs exist for high-risk processing. The platform holds each one.
How Dazr helps with GDPR
Dazr Compliance is an EU-hosted compliance management platform (GRC software) for European organisations of every size, from a five-person team to the enterprise. GDPR is one of its eleven frameworks, available from the free plan. In practice that means:
- Keep records of processing in the Article 30 register, or link your existing ROPA and review it on cadence
- Run the breach register with severity, timestamps, regulator-notification block and root cause
- Maintain the sub-processor register with DPA URLs, review dates and contract-expiry flags (Pro and Enterprise)
- Track DPIAs as recurring controls per high-risk processing activity
- Hand the supervisory authority a clear audit trail when sampled
Back to the full Dazr Compliance overview › | Sign up free ›