GDPR checkFictional example
Can we share data with this supplier?
Review pending.
Missing: a choice to delete or get back the data, and evidence of security measures.
Selected checks, not a full GDPR assessment or approval to share data.
The verification layer for regulated decisions.
Baselex checks your documents against regulatory requirements, flags gaps and shows the evidence. Your experts make the final decision.Check documents against regulations. See the gaps and evidence. Your experts decide.
Too much time checking.
Not enough time deciding.
Documents are scattered. Requirements need checking. Your experts spend time chasing evidence before they can make the call.
Weeks to minutes.
For assessment preparation within an agreed scope. Your team still reviews the findings and makes the final decision.For assessment preparation in an agreed scope. Your experts make the final decision.
What does a finding look like?See a check in action.
GDPR checkFictional example
Can we share customer data with this supplier?Can we share data with this supplier?
A customer-support provider processing personal data on our behalf.A supplier processing data on our behalf.
Pending
Review pending. A required contract clause is missing, and security safeguards still need to be verified.Missing clause and security evidence.
Requirements checked Open a finding to follow its evidence trailTap a finding
Use data only as instructedInstructions for data useThe agreement includes this restriction. Met
-
The agreement must limit processing to documented instructions, subject to applicable legal exceptions.
- Evidence foundCustomer Data Processing Agreement.pdf
Clause 3.2 · Processing instructions · page 4
“The Provider will process Customer Data only on documented instructions from the Customer, except where required by applicable law.”
- Baselex assessmentMet
The clause limits processing to documented instructions and includes the applicable-law exception.
Delete or return data when the service endsDelete or return dataThe required clause is missing. Not met
-
The agreement must provide for deletion or return of personal data at the customer’s choice when the service ends, and deletion of copies unless EU or Member State law requires storage.
- Evidence foundCustomer Data Processing Agreement.pdf
Section 12 · Termination and retention · pages 14 and 15
“The Provider may retain service records in line with its retention policy.”
- Baselex assessmentNot met
The section gives the customer no choice to delete or return personal data and does not address existing copies.
Appropriate security safeguardsSecurity safeguardsEvidence of safeguards has not been supplied. Need evidence
-
The provider must offer sufficient guarantees and use security measures appropriate to the risks of the processing.
- Evidence foundSupplier evidence folder
Security safeguards · no file supplied
No security policy, control summary or certification was available to check.
- Baselex assessmentNeed evidence
This requirement cannot yet be verified because the supporting security evidence is missing.
What happens next?Next:
Add the missing clause and obtain the security evidence. Agents recheck the findings; any required human approval still applies.Request the clause and security evidence. Your team reviews the updated findings before deciding.
Real GDPR requirements; fictional documents and findings. Selected processor checks, not a full GDPR assessment or approval to share data.Fictional example. Selected processor checks, not a full GDPR assessment or approval to share data. Read the EDPB guidance (opens in a new tab).
What would you like to check?
Available for demos and pilots.
Who it's for
- Compliance teams
- Find gaps against regulatory requirements.
- Legal teams
- Review contract terms and supporting evidence.
- Procurement teams
- Identify missing or conflicting supplier information.
- AI governance teams
- Understand what needs attention before using an AI system.
Across industries
Every review starts with an agreed scope.
- Financial services
- Healthcare & life sciences
- Technology & AI
- Manufacturing
- Energy & utilities
- Public sector
From regulations and documents to a clear decisionHow the review works
Agree the review.Define the review
Define the question, requirements and documents to include.
Check the documents.Check the evidence
Baselex checks the evidence and flags gaps or conflicting information.
Make the call.Your team decides
Your team reviews the findings, follows up where needed and decides.
Bring one review. See what your team would receive.Bring one review.
Tell us what you're checking. We'll discuss the scope and show how Baselex could support your team.See the findings and evidence your team would receive.
Request a demo