Skip to how it works

Record of processing activities

Your RoPA.
Connected to your organisation.

Build and maintain your Record of Processing Activities with the systems, vendors and people behind it—all in one workspace.

See how it works
DaPrOS processing activities register listing People operations, Customer relationship management, and Website and communications. DaPrOS processing activities register listing People operations, Customer relationship management, and Website and communications.

Your systems, vendors and privacy records belong together.

DaPrOS connects the information behind each processing activity, helping your team build a register it can keep up to date.

Organisation

Start with the organisation you know.

Record the systems your organisation already uses. DaPrOS keeps those tools in one inventory so they can be linked to processing activities later.

Asset cards for systems the organisation uses, each linked to a processing activity. Asset cards for systems the organisation uses, each linked to a processing activity.

Processing Discovery

Suggest records from the systems you have.

DaPrOS can suggest processing activities from the systems already in your inventory. Suggestions stay suggestions until someone in the organisation confirms them.

Pending People operations suggestion, labelled a strong match because of Personio HR, with a Review suggestion action. Pending People operations suggestion, labelled a strong match because of Personio HR, with a Review suggestion action.

Connected RoPA

See the context behind every activity.

Open a processing activity to see its purpose, the people it affects, and the systems connected to it—without copying the same facts into another spreadsheet.

People operations record showing employees and applicants, identity, employment and contact data, and the connected Personio HR system. People operations record showing employees and applicants, identity, employment and contact data, and the connected Personio HR system.

Collaboration

Bring the right people into the review.

Assign questions and reviews to the people who know the answers. The privacy team can accept, return or reject the result without completing every field itself.

Personio vendor review awaiting a Privacy Officer decision, showing submitted DPA and subprocessor values marked as new. Personio vendor review awaiting a Privacy Officer decision, showing submitted DPA and subprocessor values marked as new.

Documentation

Keep every processing activity structured.

Each processing activity holds structured Article 30 fields—purpose, people, systems, retention and related privacy information—so the organisation can review and maintain them in one record.

People operations record with structured purpose, legal entity, legal basis and retention fields. People operations record with structured purpose, legal entity, legal basis and retention fields.
  • Purpose of processing
  • Categories of data subjects
  • Categories of personal data
  • Recipients
  • Systems and assets
  • Vendors and processors
  • International transfers
  • Retention
  • Security measures
  • Responsible functions
  • Legal basis and supporting privacy information

From register to work

Keep assessments on the record they belong to.

The processing activity stays at the centre. Related work is connected back to that record instead of living in a separate tracker.

Privacy assessments

Run a DPIA, LIA or TIA against the processing activity it belongs to, instead of managing those exercises in a separate file.

Vendor reviews

Review the third parties supporting a processing activity and keep the result on the vendor record.

System assessments

Capture how personal data is processed in the systems your organisation uses.

Documentation

Generate a structured Record of Processing Activities from the information already held in DaPrOS.

Plans

Choose the DaPrOS plan that fits your organisation.

Access is provisioned by invitation.

  • Basic

    €59/month

    A focused foundation for smaller privacy teams.

  • Pro

    €119/month

    Broader operational capacity for growing teams.

  • Enterprise

    €249/month

    Higher limits and advanced capabilities for established teams.

Your Record of Processing Activities should not live in a spreadsheet.

It should show how your organisation processes personal data, what is complete, and what still needs attention.