Article 30 record, both roles
Covers article 30(1) as controller and 30(2) as processor in the same place, and exports to PDF or Excel when someone asks to see it.
From twelve spreadsheets to one record of processing
Your GDPR documentation probably already exists. It just lives in spreadsheets, Word files and a few inboxes. Export what you have and we structure it in .legal for you, so the record has one home and stays current.
Unlimited users • Free onboarding and migration • No commitment
.jpeg)
.jpg)
.jpg)
.jpg)
-1.png)
.jpeg)
.jpg)
From spreadsheets to one platform Sofie stopped being Meridian's version control department
Sofie Bruhn is group DPO at Meridian Nordic. Her Article 30 record was spread across twelve spreadsheets, a folder of Word documents, and a few email threads where the actual decisions had been made. She knew it was out of date. She just couldn't tell you which parts. So she exported everything, sent it over, and .legal structured it in the platform for her. Two weeks later she had one record, and the awkward job of filling the gaps it had made visible.
-
One Article 30 record instead of twelve files, with a change log behind it.
-
The move took a fortnight, and nobody at Meridian retyped a row.
-
The gaps became visible, which was uncomfortable and useful in equal measure.
-
Reviews now arrive as tasks with an owner, not as something Sofie has to remember.
From spreadsheets to one platform What the spreadsheet is actually costing you
Spreadsheets aren't the problem on the day you write them. They're the problem eighteen months later, when the file has four versions and the person who understood it has moved on.
-
Nobody can say which version is current, so everyone hedges.
-
The facts live with system owners, so every update turns into a chase.
-
The record was accurate once, and no system tells you when that stopped being true.
From spreadsheets to one platform Export what you have, we do the moving
This is the part most teams dread, and it's the part we take off you. You send us what exists today. We match the fields from your export to the platform by hand.
-
Excel and Word exports are both fine, home-built structures included.
-
We review the data first, usually in one to two working days, and flag what looks thin.
-
Typically done inside two weeks, at no extra cost, because it's part of the deal.
From spreadsheets to one platform One record, both roles, one export
Article 30 has two halves and most spreadsheets only really handle one. In .legal the controller record and the processor record sit in the same place, built to the same requirements.
-
Article 30(1) as controller and 30(2) as processor, without a second system.
-
Every change registered, so several colleagues can work in it at once.
-
Export to PDF or Excel when an auditor, a customer or the authority asks.
From spreadsheets to one platform Templates instead of a blank page
A blank documentation field is where good intentions go to die. You start from predefined templates for systems, policies and processing activities, and edit from there.
-
Templates for the things nearly every organisation has to describe anyway.
-
A notification when we update a template, so yours doesn't quietly fall behind.
-
Faster to correct something that's roughly right than to invent it from nothing.
From spreadsheets to one platform Risk on one scale, not twelve opinions
Risk assessment in a spreadsheet tends to mean whoever filled the cell decided what "medium" meant. One shared scale makes the answers comparable.
-
Assess each processing activity from a catalogue of common threat scenarios.
-
See the whole spread in one risk matrix instead of reading rows.
-
Export assessments individually or as a single combined report.
From spreadsheets to one platform The rails are ours, the judgement stays yours
We'll give you the structure, the templates and a migration team. We won't pretend that makes you compliant.
-
We move and structure your documentation, we don't fill in what's missing.
-
You decide what your processing activities are and how risky they are.
-
The record stays current because the work is scheduled and owned, not because it's automatic.
From spreadsheets to one platform Frameworks this covers
One record, built to the requirements it has to meet.
-
GDPR
Learn about GDPRThe predefined GDPR framework covers the operational requirements, processing principles, data subject rights and the obligations that follow your role as controller or processor, so the record you move in has something to be measured against.
Our Customers
+400
companies
+10.000
users
+79.000
contracts
+14.000
processing activities
.legal's team has consistently demonstrated a commitment to innovation while being responsive to the needs of our mutual clients.
With .legal, we've gained a simpler and more manageable solution that better suits our needs
.legal has been the right choice for us. .legal are professional and welcoming with skilled employees.
Firstly, it means that not all the work is in one place (me), and secondly, that the understanding of GDPR is implemented throughout the organisation.
From .legal, we experience an incredibly high degree of flexibility and willingness to adapt features to our local needs.
.legal's team has consistently demonstrated a commitment to innovation while being responsive to the needs of our mutual clients.
With .legal, we've gained a simpler and more manageable solution that better suits our needs
.legal has been the right choice for us. .legal are professional and welcoming with skilled employees.
Firstly, it means that not all the work is in one place (me), and secondly, that the understanding of GDPR is implemented throughout the organisation.
From .legal, we experience an incredibly high degree of flexibility and willingness to adapt features to our local needs.
We are satisfied with the switch to .legal – it has strengthened our compliance work, made processes easier to manage and more transparent, and improved cross-team collaboration
It just works! It is so easy and user-friendly, and the overview of processing activities is brilliant.
.legal has really understood what it means to create a user-friendly and efficient solution. Privacy is an attractive product compared to price and functionality.
.legal continuously update the platform to ensure their customers always remain compliant. In our view, any other choice would be a downgrade.
The implementation of .legal has made a difference in the way we handle compliance. The system has created structure and overview, which has had concrete benefits.
We are satisfied with the switch to .legal – it has strengthened our compliance work, made processes easier to manage and more transparent, and improved cross-team collaboration
It just works! It is so easy and user-friendly, and the overview of processing activities is brilliant.
.legal has really understood what it means to create a user-friendly and efficient solution. Privacy is an attractive product compared to price and functionality.
.legal continuously update the platform to ensure their customers always remain compliant. In our view, any other choice would be a downgrade.
The implementation of .legal has made a difference in the way we handle compliance. The system has created structure and overview, which has had concrete benefits.
Use cases
Book demo
Find the job you need done
Every use case is a real piece of compliance work, told the way it actually runs in the platform. Filter by who you are, what you work with, and which frameworks you answer to.
Compliance & GRC leadCISO & IT securityDPOLegal counselExecutive & board
Energy & utilities
SMVMid-marketEnterprise & group
GDPRNIS2ISO 27001CIS18DORAePrivacyAI ActD-mærketData Act
Compliance & GRC lead
Manage compliance across a group of companies
Run every company in the group from one platform, document once at group level, and still report entity by entity. Delivered by the Group Companies add-on.
See group compliance
Compliance & GRC lead
Multi-framework compliance: do the work once
Do a control once and it counts across every framework it maps to, with a simulated score on the ones you haven't started yet.
See multi-framework compliance
Compliance & GRC lead
Run awareness training that reaches every colleague
Send out training and policies, chase the stragglers automatically, and prove every colleague completed it. You bring the material, we run the rails.
See awareness training
Legal counsel
Run due diligence on your vendors
Classify a vendor on your own criteria, get the answers and documents you need with no login for them, and move the approved ones straight into contracts.
See vendor due diligence
No use cases match that combination yet. Try removing a filter.
