Build your record of processing and link it to the vendors and systems involved.
A processing activity describes one way your organization uses personal data. Together, they form your record of processing.
Add an activity
Open Processing Activities and add an activity. Record:
- Its purposes and lawful bases
- The data subjects and personal data categories, including any special category data
- Cross-border transfers and the safeguards that cover them
- How long the data is kept
- Who receives the data, and which security measures apply
- An owner and department
Link it
Link the vendors, assets, and services involved. Data Mapping then shows how personal data moves between them.
AI systems
If an AI system processes the data, record it under AI Systems and link it. You can record its risk level, lifecycle stage, model type, training data, bias assessment, and ethics review, and log any AI incidents against it.