GDPR has no certificate, so your customers ask you to prove that you comply. Naq sets up most of the work for you, then checks your proof every night.
GDPR with Naq, a three-minute walkthrough of the product · Narrated, with captions
GDPR is the law on how you collect, use and protect personal data. In the UK the Information Commission's Office (ICO) enforces it, and you must be able to show that you comply, not only say it.
The most the ICO can fine you, whichever is higher, based on your global turnover.
How long you have to report a serious data breach to the ICO after you find out about it.
Customers check you themselves, with supplier questionnaires and requests for your policies.
This is everything GDPR asks of you. For each step, here is what you do and what Naq does.
Write down what GDPR covers in your organisation, and what it leaves out.
GDPR arrives already mapped: 47 requirements linked to 19 ready-made controls.
Connect Google Workspace or Microsoft 365, then list each processing activity: whose data it is, your lawful basis, and how long you keep it.
Finds your devices and cloud services, checks that every supplier that needs a data processing agreement has one, and flags any activity with no lawful basis or retention period.
Review the policies, approve them, and send them to all staff.
Gives you 30 ready-written GDPR templates, from your privacy policy to breach notification, and tracks who has read and acknowledged each one.
Assign the courses to a whole team at once.
Includes 14 training courses for GDPR, with a five-part privacy series, and shows at a glance who is overdue.
When a new system will hold sensitive data, describe it and review the draft.
The DPIA agent drafts your data protection impact assessment from the records you already keep in Naq.
Log an incident, contain it and resolve it, with the lessons you learned.
Checks that every data breach has a decision on telling the ICO within 72 hours.
Naq links your evidence to the right controls and checks it every night. A lapsed policy review or a missing lawful basis is flagged before a customer finds it.
Document · linked by Naq
Checks
Real checks from the GDPR controls in Naq. The results shown are illustrative.
Publish your GDPR controls and documents on your own Trust Centre. Customers answer their own questions, so their supplier questionnaires get shorter.
They see which controls are in place, without a call or a spreadsheet.
For example your DPIA, with their reason for asking.
Naq emails them a link straight away.
Mapped to UK GDPR and EU GDPR, from Article 5 to Article 49.
And 10 more, including DPO Appointment and Tasks and Data Protection by Design and Default.
And 21 more, covering security, suppliers and incidents.
Every document you link as evidence is also checked automatically: its current version must be approved, staff acknowledgements must be complete, and its review date must not have passed.
Built from the Naq control library for GDPR.
See the six steps in your own workspace, with your own data.
