GDPR Readiness assessment
Structured onboarding turns your company, product and vendor facts into a scoped gap assessment against GDPR, UAVG, ePrivacy, the AI Act, NIS2, the Data Act and the DSA — every finding cites the legal provision first.
— Product
Structured onboarding turns your company, product and vendor facts into a scoped gap assessment against GDPR, UAVG, ePrivacy, the AI Act, NIS2, the Data Act and the DSA — every finding cites the legal provision first.
Rules-based checks run first; AI (paid tiers, no training on your data) drafts the summary, required actions and a step-by-step plan from minimised, company-level facts. Ask the DPOne Assistant anything in English, Dutch or Persian.
A PDF on DPOne letterhead with findings by Privacy Hierarchy tier, evidence, required actions with owners and due dates, a plan and its limitations. Red (critical) findings are reviewed by the DPO before the report is final.
After you prove domain ownership with a DNS TXT record, DPOne runs authorised, passive checks — HTTPS, security headers, cookies set before consent, tracker scripts and privacy/cookie links. Green = passing, orange = needs review, red = at risk.
On the DPO Service, Mahdi Barkabian Zanjani acts as your named external Data Protection Officer (GDPR Art. 37–39) under a defined service schedule.
Service Agreement and Art. 28 DPA generated from your answers and signed in-platform (eIDAS simple e-signature with timestamp, IP and SHA-256 hash). Reports, contracts and audit trail in one place.
Embed “Verified & Monitored by DPOne” on your site. It is Active only while your subscription is paid and links to a live verification page with QR code — never a fake “GDPR certified” seal.
Add the bot to your team group, link it with a one-time code and receive report and badge updates — or ask GDPR questions with /ask.
Create your account & profile
Answer the onboarding questionnaire
Review & e-sign agreement + DPA
Pay securely via Stripe
Verify your domain, scan & get your report
Status labels are platform indicators within a stated scope — not a legal opinion, regulator approval or GDPR certification (Art. 42–43). Our methodology
Ready to build a privacy-first business?
Start your journey with DPOne today.