What you bring
A review question, the documents you are permitted to use and the requirements to assess. We agree the scope before the check.
See the gaps before you make the decision.
Baselex checks the documents in your review against agreed regulatory requirements. See what the evidence supports, what's missing and what needs attention.
Compliance on AutopilotCompliance ModuleAvailable for demos and pilots.
What Baselex checks
Support for the selected requirements, conflicting information and missing evidence. Missing evidence is not automatically proof of non-compliance.
What you receive
Findings linked to their sources and specific issues to follow up. Your experts inspect the evidence and make the final decision.
A familiar question. A clear next step.
In this fictional GDPR review, a contract clause is missing and security documents are still needed.
Next: ask the supplier for both, then review the updated findings. Open a check to see the requirement and the evidence behind it.
GDPR checkFictional example
Can we share customer data with this supplier?
A customer-support provider processing personal data on our behalf.
Pending
Review pending. A required contract clause is missing, and security safeguards still need to be verified.
Requirements checked Open a finding to follow its evidence trail
Use data only as instructedThe agreement includes this restriction. Met
-
The agreement must limit processing to documented instructions, subject to applicable legal exceptions.
- Evidence foundCustomer Data Processing Agreement.pdf
Clause 3.2 · Processing instructions · page 4
“The Provider will process Customer Data only on documented instructions from the Customer, except where required by applicable law.”
- Baselex assessmentMet
The clause limits processing to documented instructions and includes the applicable-law exception.
Delete or return data when the service endsThe required clause is missing. Not met
-
The agreement must provide for deletion or return of personal data at the customer’s choice when the service ends, and deletion of copies unless EU or Member State law requires storage.
- Evidence foundCustomer Data Processing Agreement.pdf
Section 12 · Termination and retention · pages 14 and 15
“The Provider may retain service records in line with its retention policy.”
- Baselex assessmentNot met
The section gives the customer no choice to delete or return personal data and does not address existing copies.
Appropriate security safeguardsEvidence of safeguards has not been supplied. Need evidence
-
The provider must offer sufficient guarantees and use security measures appropriate to the risks of the processing.
- Evidence foundSupplier evidence folder
Security safeguards · no file supplied
No security policy, control summary or certification was available to check.
- Baselex assessmentNeed evidence
This requirement cannot yet be verified because the supporting security evidence is missing.
What happens next?
Add the missing clause and obtain the security evidence. Agents recheck the findings; any required human approval still applies.
Real GDPR requirements; fictional documents and findings. Selected processor checks, not a full GDPR assessment or approval to share data. Read the EDPB guidance (opens in a new tab).
The licence is valid.
The site doesn't match.
A deeper third-party due diligence example shows why a valid document may not support the decision in front of you. The fictional licence covers a different site from the one requested.
Explore the supplier reviewThird-party due diligence is one starting use case. Each review needs its own agreed requirements, permitted evidence and validation.
Start with one review.
Agree the scope and success criteria before the pilot. Compare preparation effort, finding quality and follow-up with your current process.
Bring to the conversation
- One regulatory review or third-party due diligence decision.
- The sources agents may access and the review boundaries.
- The points where reviewers get stuck.
Agree before the pilot
Choose the cases to compare with your current process, define the review roles and permissions, and decide what a useful result would look like.
Before you evaluate Baselex.
Can we explore another compliance workflow?
Yes. Bring the decision your team needs to make. We’ll discuss its requirements and evidence sources to establish whether it fits and what would need validation before use.
Does it replace our quality or document system?
No. Baselex runs on top of your existing quality and document systems. It reads the contents of permitted documents, checks the evidence against your requirements and shows the proof behind each finding. It takes on the manual review work, while your experts handle exceptions and required approvals.
When does a person need to approve?
Your team controls the permissions. Routine actions may proceed within delegated authority; exceptions and actions needing additional approval go to your experts. A satisfied check does not remove an approval your process requires.
Can we start with a limited scope?
That is the purpose of a focused pilot: agree one decision type and the evidence needed before considering a wider rollout.
Bring one review. See what your team would receive.
Tell us what you're checking. We'll discuss the scope and show how Baselex could support your team.
Request a demo