Manage personal data, data subject access requests, data subject requests, consent and data retention with defensible, audit-ready records — in line with the GDPR and ISO 27701.
Everything a privacy programme needs — records, assessments, requests and evidence — all within the same platform as the rest of your governance.
Keep records relating to Article 30 in connection with systems, data and suppliers.
Run and version control impact assessments on data protection with approval.
Receipt, verification of identity and a response within the statutory time limits.
Record, specify and highlight the grounds for lawfulness and consent.
Retention periods, legal holds and disposal workflows.
Assessment and notification of breaches within 72 hours.
DPA, data transfer mechanisms and due diligence on subcontractors.
SCC, transfer impact assessments and transfer mapping.
Keep your processing records in one place and iComply will highlight them in all the regulations and laws that refer to them — without any duplication of effort.
Scope & diagnosis
Define the scope and carry out a GAP analysis against the selected standards.
Map controls
Select controls; iComply automatically maps them to each relevant framework.
Collect evidence
Assign tasks, upload evidence once and reuse it across all requirements.
Audit & monitor
Carry out audits, track CAPA and monitor compliance on an ongoing basis.
