Manage your TOM clearly and systematically

Audit

Tailored audit questionnaires help you identify improvement measures for your data protection organisation.

Data processor / service provider management

Service providers are clearly managed and meaningfully linked to the record of processing activities.

Data type management

Saves time: Data types, categories, and groups of people are managed centrally and are linked to your entire GDPR documentation.

Data protection impact assessment (DPIA)

Simplified documentation of high-risk processing activities through intelligent linkage with the record of processing activities and TOM.

Verified templates and samples

Get started easily: use our verified templates for records of processing activities, technical and organisational measures, or service providers, or create your own.

Import your documentation

Import: done! We automatically transfer your current data protection documentation (such as RoPA, DPIA, TOM, etc.) into caralegal.

Deletion concept

Create your deletion concept automatically from the record of processing activities, define deletion rules and ensure compliance with your deletion deadlines.

Technical  and organizational measures (TOM)

Manage your technical and organizational measures on a processing-specific or cross-company basis.

Record  of processing activities (RoPA)

Departments create processing activities independently. You monitor a structured overview of each organizational unit.

Authority processes

At the push of a button, you handle requests from data protection authorities. Your documentation is centrally stored, keeping all compliance obligations in view.

Data subject requests

Keep track of all requests from data subjects and meet obligations on time.

Data protection breaches

You are prepared for data protection breaches and respond promptly. Your audit procedures are well-developed and secure.

Service provider
compliance check

Contractual agreements with service providers are systematically and automatically reviewed in accordance with current legal requirements.

Recognising legal basis

Turns non-legal experts into data protection champions! You receive suggestions for the legal framework based on Article 6 para. 1 GDPR.

Employee training

Interactive and sustainable: Raise employee awareness to handle personal data in accordance with data protection.

Working together across language barriers: your documentation is automatically translated into 28 languages.

Task management

Considerably more efficient: create tasks, allocate them to coworkers, and collaborate on documents jointly via commenting.

Compliance dashboard

Always keep track of the current status: Customisable dashboard featuring essential data protection KPIs.

Multi-factor authentication

For added security: Secure access for all users with multi-factor authentication. Upon your request, this becomes mandatory for all users.

Organizational management

Enterprise-ready: Model complex corporate structures in caralegal. Assign customized permissions to each user.

Recurring tasks

Efficiently manage recurring tasks, ensuring the relevance of critical documents and processes.