Diagnostic
Eleven questions that show which of 13 data protection, cybersecurity and information security frameworks apply to you (GDPR and cookies, NIS2, DORA, Cyber Resilience Act, AI Act, Data Act, ISO 27001, ISO 27701, ISO 42001, ISO 22301, TISAX, PCI DSS): definitely, probably or only recommended, with the reason, the authority, the deadlines and the first three steps.
Based on the GDPR and Romanian Laws 190/2018 and 506/2004, Emergency Ordinance 155/2024, the DORA, CRA, AI Act (with the 2026 postponements) and Data Act Regulations. The result can be printed or downloaded as Word.
Open the diagnostic →
Questionnaire
Nine questions that establish whether you must appoint a DPO. It checks the three cases in Article 37 GDPR and, on top of them, the Romanian case the European guidance does not cover: processing the national ID number on the basis of legitimate interest.
Based on WP 243 rev.01, Article 37 GDPR, Romanian Law 190/2018 and Law 363/2018. The result can be printed or downloaded as Word.
Open the questionnaire →
Generator
A short questionnaire that builds you an internal policy for ChatGPT, Claude, Gemini and other AI tools, directly in your browser, plus an implementation checklist by role.
The document can be copied, printed or downloaded as Word. Nothing leaves your computer.
Open the generator →
Questionnaire
Nine questions about a single processing operation: which data, how many people, what you do with it. A reasoned answer under Article 35 GDPR, the Romanian DPA's list (Decision 174/2018) and the nine criteria of the European guidelines, plus a DPIA skeleton on the 2026 EDPB template.
The result can be printed, copied or downloaded as Word. Nothing leaves your computer.
Open the questionnaire →
Checker
Paste the text of your privacy notice and see which elements of Articles 13 and 14 GDPR are missing, what to check and what to write for each gap, with model text.
Keyword check, in your browser; the text goes nowhere.
Open the checker →
Generator
Five steps that build your organisation's continuity plan directly in the browser: impact analysis, recovery targets, response scenarios, mandatory notifications and an implementation checklist.
Follows the ISO 22301 structure, with the requirements of NIS2, DORA, ISO 27001 and GDPR. The result can be printed or downloaded as Word.
Open the generator →
Calendar
The next legal deadline with a countdown and the list of those that follow: the AI Act, the Cyber Resilience Act, PPWR, NIS2. Updated at every legislative change.
No account, no data sent. Deadlines checked on 19 October 2026.
Open the calendar →
Calculator
Enter the moment you became aware of a data incident and see when the Romanian supervisory authority, ANSPDCP, must be notified (Article 33 GDPR), how much time you have left and which deadlines NIS2 and DORA add.
The calculation runs in the browser. Nothing is sent.
Open the calculator →
Questionnaire
Ten questions about a time and attendance or access system using fingerprints or facial recognition: whether it can be justified, what your obligations are, what is missing and what a correct implementation looks like. Based on Article 9 GDPR, Law 190/2018, the ANSPDCP list and the AI Act.
The result can be printed, copied or downloaded as Word. Nothing leaves your computer.
Open the questionnaire →
Why we publish them
Because these are questions with a verifiable answer, not matters to negotiate: you need a DPO or you don't, the processing needs an impact assessment or it doesn't, something is missing from the privacy notice or it isn't. The answer comes from the law, not from our price list, so we give it for free.
Whoever finds out they have no obligation has saved an unnecessary expense. Whoever finds out they do leaves with the documented analysis the accountability principle requires and knows exactly what to do next. Our consulting starts at that next step, not at the basic question.
Does the result show an obligation?
We go through what your organisation actually processes and decide how the role is covered, internally or outsourced.