NRGi: Powering Compliance Alongside Electrification
A perfect example of how we develop the platform together with our users.
Who is NRGi?
NRGi is an energy company headquartered in Denmark, with a mission to accelerate the green transition. For over 100 years, they've actively worked to advance electrification, moving away from fossil fuels and towards renewable energy as the key to a climate-neutral society.
That's the mission they live by. Every day. For their 235,000 cooperative members, their customers, and the communities around them. They're not just an energy company providing energy for the future. They also play an active role in society and the local communities around them. No one creates change alone, but together they do.
How did NRGi work with compliance before .legal?
Before adopting a dedicated compliance platform, NRGi managed their privacy documentation through Excel spreadsheets and internal systems. As GDPR requirements became more widespread and the compliance workload increased, they recognised the need for a more structured approach.
"As GDPR became more widespread and there was more work involved, it was decided that we should have a system that could gather most of our compliance work," says Mette Mühlendorph at NRGi.
In 2021, NRGi began onboarding with Pactius Privacy, a former .legal product. However, they never fully completed the implementation. Fortunately, the timing aligned with the launch of .legal's new GDPR compliance platform, and .legal helped migrate their documentation directly to the updated system.
For a cooperative with 1,725 employees and 235,000 member-owners, maintaining compliance through manual systems had presented ongoing challenges. The transition to .legal's modern platform provided the structure and oversight they needed.
Which .legal modules does NRGi use?
NRGi uses all modules on the .legal platform. They have particularly focused their efforts on establishing comprehensive documentation within the Data Protection and Vendor Management modules, with emphasis on the following areas:
Data processing overview and sub-data processors (Vendor Management)
NRGi uses .legal to create an overview of their data processors and sub-data processors, and crucially, to link them together. The platform provides a clear and searchable overview of supplier details, documents, and risk assessments. The supplier information links seamlessly with other functions, such as the documentation of processing activities.
Audit function, internal and external (Vendor Management)
With various audit templates, NRGi has the ability to obtain documentation from their data processors. This can include requesting audit statements, which data processors can easily upload, or sending out weighted questionnaires that also provide a risk level for the supplier based on their responses. Audits can be used both internally and externally, and it's straightforward to build new audit templates through the administration interface.
Processing activities (Data Protection)
NRGi records and maintains their processing activities in .legal, which supports their overview and compliance with Article 30 of the GDPR. This provides a comprehensive overview and makes it easier to identify risks and handle them appropriately.
The impact on collaboration and compliance
The use of .legal has had a positive effect on collaboration between colleagues in connection with compliance work. Previously, much of the work was spread across various emails, Excel files and local documents, which made it difficult to ensure consistency and follow-up.
With .legal, NRGi has gained a shared platform where they:
- Document audit processes – Both internal and external audits are structured and documented in one place
- Gain a shared overview of data processors – All relevant information about data processors is collected and accessible
- Register processing activities in a shared database – This ensures consistency and makes it easy to maintain an up-to-date overview
Currently, there are 35 registered users distributed across 7 companies. This includes not only those who are active users of the system, but also a GDPR officer and a GDPR coordinator in each company who keep the system active.
A more structured approach to compliance
The use of .legal has changed NRGi's working methods and made compliance work more structured and effective. Previously, tasks and documentation were spread across various emails, spreadsheets and local folders, which often led to a lack of overview.
"The implementation of .legal has made a difference in the way we handle compliance. The system has created structure and overview, which has had concrete benefits," says Mette Mühlendorph at NRGi.
Time savings
Many tasks that previously required manual coordination via emails and spreadsheets can now be solved directly in the system. For example, audit processes and updating data processor overviews have become far more efficient, as NRGi now has one unified platform for follow-up tasks and documentation.
Increased accuracy
By collecting processing activities, data processing agreements and audit trails in .legal, NRGi minimises the risk of errors and missing updates. The system helps ensure that they have the necessary information and approvals in place, and that they are correctly versioned.
Better overview
It is a major advantage to be able to log in and get a comprehensive overview of the status of compliance tasks, rather than having to search for information in different systems and folders.
Intelligent functionality and responsive partnership
NRGi particularly appreciates the system's intelligent features that simplify daily work.
"I think it's smart that when you create a supplier and add sub-data processors, you can choose whether the sub-data processor should be automatically added if the legal entity is selected in processing activities, systems and contracts," says Mette Mühlendorph at NRGi.
Beyond the platform itself, NRGi values .legal's approach as a supplier.
"One of the great strengths of .legal is their approach as a supplier. They are always receptive to our needs and challenges, and we experience that our input is taken seriously. When we have suggestions for improvements or wishes for functionality, it is met with interest and dialogue, and often translated into concrete development initiatives," says Mette Mühlendorph at NRGi.
Developing the platform together
NRGi has been using .legal for several years, and throughout the partnership they have consistently been excellent at sharing their feedback and input. In this way, they play perfectly into .legal's ambition to develop the platform together with customers. Smart features, such as automatic linking of sub-data processors, are often invented based on feedback from those who use the platform daily.
The collaboration with NRGi is a perfect example of how we develop the platform together with our users.
.jpeg)
.jpg)
.jpg)
.jpg)
-1.png)
.jpeg)
.jpg)
