Your Data Protection studio at a glance
Hub in the middle, satellites around it - this is exactly how it looks in your account.
What it solves
The privacy policy is copied from the old website, and at the word "DPA" the topic gets postponed.
The privacy-policy, DPA, TOMs and deletion-concept generators walk you by questionnaire to the finished document - duty done, afternoon saved.
When the supervisory authority asks, the grand search begins for documents that never existed.
The Article 30 helper builds your records of processing, the GoBD archive zipper packs audit-proof exports, and the whistle box covers the whistleblower obligation too.
The team password is Summer2024, and confidential attachments go out unencrypted.
The password generator builds passwords nobody can guess, and email encryption makes sure confidential things arrive confidential.
From zero to provable
The road to a clean GDPR baseline - in four clear steps.
- 1
Build the privacy policy
The generator asks what your website actually does and writes the policy to match - no boilerplate graveyard.
- 2
Rein in the providers
For every provider that touches data, the DPA generator builds the agreement - and the TOMs describe how you protect what you process.
- 3
Keep the records
The Article 30 records of processing - the one list every authority asks for first - come together step by step in the helper.
- 4
Delete with a plan
The deletion concept defines what goes when. GDPR does not mean keep forever - it means delete with a reason.
Try it right here
Try the password generator - real, not a screenshot. Runs entirely in your browser, not a single character leaves it.
This is not a mockup.
One subscription. All nine studios.
Every studio, every tool, the encrypted Aktenschrank - for one person.
Get PlusAll prices include 19% German VAT. Your founder price stays for as long as your subscription runs. Annual pays 10 months for 12.
FAQ
Does this replace a data protection officer?
No. Whether you must appoint a data protection officer is governed by Art. 37 GDPR - the studio does not change that. It takes the time-eating routine work off your plate: documents, records, evidence. If you do have a DPO, they will work a lot faster with it.
Do I really need this as a two-person shop?
As soon as you have a website with a contact form: yes. GDPR has no minimum size - but with generators the duty is one afternoon, not a project.
Are the documents up to date?
The generators are maintained and follow current law. You answer questions about your business - keeping up with the paragraphs is our job.
Where do the generated documents live?
On servers in Germany, GDPR-compliant - anything else would be embarrassing for this particular studio. Export any time.
What about the whistleblower obligation?
From 50 employees you need an internal reporting channel - the whistle box is exactly that, no extra vendor, no extra invoice.
The studio is already open.
No sign-up to look around, no card for the trial, no fine print on the way out.