Free GDPR record of processing generator (Article 30)

Enter your processing activities, export an Article 30 register as CSV or PDF. No account, no install, and no data leaves your browser: entries are kept in local storage and the export is built client-side.

The five minimum columns — and the two that are missing

This generator covers the five columns found in every template: processing, purpose, data categories, recipients, retention. Article 30(1) requires seven: the controller's identity (carried in the header above) and the description of security measures, plus an explicit mention of non-EU transfers.

That is exactly where a spreadsheet breaks down: nobody fills a “non-EU transfer” column by hand for thirty tools. The RoPA Pilot extension fills it from its catalog and flags unverified mechanisms.

What is sent to a server: nothing

No field of this form is transmitted. The CSV export is assembled in the page; the PDF export opens a local printable document. If you leave the page, your entries are restored from browser local storage. Only the voluntary compliance-watch signup, at the end of the page, sends an email address.

Keep reading