← All modules and pricing

GDPR

GDPR — register, requests, and reporting channels in one place.

Processing register, TOM document, deletion concept, access requests answered on time — day-to-day data protection, guided instead of improvised.

Price

€59/ month

or €590/year — 2 months free

All prices plus VAT, flat per company, hosted in Germany, cancel monthly.

See bundles →Questions? Request a demo →

What GDPR requires of you.

1

Keep a complete, current record of processing activities — the first document a supervisory authority asks to see.

2

Document technical and organisational measures (TOMs) that match your actual systems, not a generic download.

3

Answer data subject access and erasure requests inside the statutory deadline, every time, not just the first time.

4

Know your breach-notification channel and 72-hour clock before an incident happens, not while it's happening.

In numbers, from our requirement catalogue

11

Requirements in the catalogue

11

Provisions checked against the statute text and backed by at least one measure in the catalogue

Every requirement carries a source, every one has at least one measure — checked by an automated catalogue test on every change. That's the foundation of our promise: audit-ready.

GDPR: frequently asked questions

What does the GDPR module cost at Compliverse?

€59 per month or €590 per year — paying annually means two months free. Bookable directly, no sales call. Amounts net of VAT.

GDPR: legal obligation or voluntary?

An obligation, and one without a size threshold: the GDPR applies the moment you process personal data. What changes with size is the extent of individual duties — not whether they apply at all. Judging your individual case is a lawyer's job.

What does GDPR actually require of us?

Keep a complete, current record of processing activities — the first document a supervisory authority asks to see. Document technical and organisational measures (TOMs) that match your actual systems, not a generic download. Answer data subject access and erasure requests inside the statutory deadline, every time, not just the first time. Know your breach-notification channel and 72-hour clock before an incident happens, not while it's happening.

How completely does Compliverse cover GDPR?

Our catalogue holds 11 requirements for this framework. Each carries a legal source and each has at least one measure behind it — checked by an automated test on every change, not by good intentions. That is what "audit-ready" means for us: we do not guarantee that you end up compliant, because nobody can do that honestly. We guarantee that it is provable.

Our promise

We don't say “compliant”. We say audit-ready — and we can prove it.

Nobody can guarantee that a company did everything right in an audit — not even a provider who promises it more confidently. What can be guaranteed is this. Four points, each independently verifiable.

01

Complete against the statute text

Every provision we cover has at least one requirement, every requirement at least one measure — and every one carries its source citation. That's not a promise: an automated test checks the catalogue on every change. If it finds a gap, the module doesn't ship.

→ Verifiable in each framework's requirement catalogue

02

Current, with a date

We re-read the legal texts in the original wording every month and update the product, training and website to match. Every check lands publicly in the change log — even when nothing changed.

→ Public change log on the Legal Landscape page

03

Evidenced, not asserted

Every requirement we mark as met has a document, certificate or log behind it — with a source citation and a legal-status date. What you can't hand an auditor doesn't count as done with us.

→ Evidence package as PDF, exportable at any time

04

Honest about the boundary

We provide structure, documents and evidence — not legal advice for your specific case. Where a question belongs with a lawyer, we say so instead of selling you something.

→ No legal advice — printed on every document

See the change log →

Last checked on 01/09/2026. That's how you get evidence that survives scrutiny — instead of a binder that falls apart at the first follow-up question.

What becomes important next

More modules

Legal status checked on 01/09/2026 · Every statement with a source · No legal advice