AbleToRecords | Our Product

Our Product

Introducing AbleToRecords, a sophisticated record creation tool that will help you create and store all your company records in one place.

Creating GDPR compliant records of processing activities requires legal background and good knowledge of your obligations and responsibilities as a data controller.
Many companies need to hire lawyers and data protection officers for this purpose.
We have developed AbleToRecords in order to facilitate this process and we made it both, simple to use and reliable for every business.
There are a number of legal requirements regarding the type of information that every record should contain.
Such data include the name and contact details of the controller, the purpose of the processing, a description of the categories of data subjects and personal data, categories of recipients to whom the personal data have been or will be disclosed and much more.

With our web application, most information is placed automatically within the prefilled Standard Data Protection Records; your company information and Data Protection Officer is taken directly from the database.
AbleToRecords will automate the record maintenance and creation process for your business.

Keeping a written documentation of processing activities is a legal requirement for most companies operating in the EU or EEA or targeting people there.
Both paper and electronic versions of documentation storage are admissible.
Maintaining all the records electronically in one centralized database will help businesses to easily amend, add or remove documentation when necessary.
Companies need to conduct Data Protection Impact Assessments to understand and evaluate the potential impact of a data breach on data subjects.

It is required to identify what kind of personal data is held and processed within an organization. If processing is based on a legitimate interest of the controller or a third party, a Legitimate Interest Assessment needs to be conducted.
If you process data on behalf of a third party, you need to create category records to comply with Art. 30 II GDPR.

Category records refer to cases where data processing is carried out on behalf of a third party, otherwise referred to as a controller.
Documenting category records is necessary if you are processing personal data on behalf of a client or other third parties and you have concluded a processing contract according to Article 28 GDPR.
It requires that a record of the categories of processing activities carried out on behalf of the other party be maintained by a processor.
To comply with GDPR, this type of record must contain, for example, the name and contact details of the processor or processors and of each controller on behalf of which the processor is acting, and, where applicable, of the controller's or the processor's representative, and the data protection officer.

Category Records must be kept available to present to your supervisory authority upon request. They can be shared by allowing the supervisory authority access.
AbleToRecords enables you to upload a client list and create category records automatically. Just create one standard category record and upload all clients to create the same record for all of them (if they all are provided with the same services).

Data Protection Impact Assessment is a process aimed at identifying and minimizing data protection risks.
It is required to conduct because the controller should understand the potential impact on data subjects in case of a data breach and reduce associated risks.
The DPIA includes information on the following:
- The nature of processing, its scope and purposes,
- Risk identification and assessment,
- Identification of measures to mitigate these risks.

With AbleToRecords you can make sure that no vital piece of information will be left out from your processing records.
Our prefilled standard records and templates contain all mandatory fields.
Within our templates you simply click check-boxes referring to your company and to all details about personal data that your organization holds and processes.

Before you start processing personal data based on a legitimate interest of your company or a third party, you need to perform a Legitimate Interest Assessment.
This process helps you to identify whether the “legitimate interest” can be the basis for data processing or not.
Conducting a LIA is required in order to establish the lawful basis for your actions and to avoid unlawful processing.
You can approach the Legitimate Interest Assessment by using AbleToRecords. The template implemented is based on publications of International Organization for Standards (ISO) and the UK data protection authority (ICO).

With a LIA you identify the legitimate interest, evaluate the necessity of processing and consider the data subject’s interests. These steps are also known as purpose, necessity and balancing tests.
The LIA is conducted in order to illustrate that all relevant factors have been analyzed and considered before making the decision to process personal data.
AbleToRecords makes documenting your Legitimate Interest Assessments easy.