Data Inventory
Map your organization's data landscape. Track every asset, data element, processing activity, and cross-border transfer to maintain a complete Record of Processing Activities (ROPA).
Data Assets
Data assets represent the systems, applications, and databases that store or process personal data. Each asset records its type, owner, associated data elements, and processing activities.
Customer Database
Relational or NoSQL databases storing personal data
CRM System
Software applications that process user data
HR File Share
File storage systems containing personal records
Analytics Platform
Third-party SaaS tools processing personal data
Payment Gateway
API integrations transferring personal data
Paper Records Archive
Physical storage of personal data documents
Data Elements
Data elements describe the specific categories of personal data your organization processes. Each element has a sensitivity classification ranging from Public to Special Category.
Examples include full name, email address, IP address, health records, biometric data, and financial information. Link elements to assets to understand exactly where each type of personal data resides.
Processing Activities
Document every processing activity with its legal basis, purpose, data categories, and retention period. This forms the core of your ROPA.
Legal Bases
Each activity records the controller, processor, categories of data subjects, and whether automated decision-making is involved. Activities link to data assets and elements for full traceability.
Data Flows
Visualize how personal data moves through your organization using the interactive data flow diagram. Map source-to-destination transfers between assets, departments, and third parties.
Collection
User submits data via web form
Processing
CRM system stores and indexes
Analytics
Data warehouse for reporting
Archival
Long-term encrypted storage
Cross-Border Transfers
Track international data transfers with their legal mechanisms. Document Standard Contractual Clauses (SCCs), adequacy decisions, Binding Corporate Rules (BCRs), and other safeguards.
Adequacy Decision
EU-approved country-level adequacy
Standard Contractual Clauses
EU-approved contractual safeguards
Binding Corporate Rules
Intra-group transfer framework
How to Add a Data Asset
Navigate to Data Inventory
DPOOpen the Data Inventory module from the main navigation.
Click Add Asset
DPOClick the 'Add Asset' button in the top right corner of the assets list.
Fill in Asset Details
DPOEnter the asset name, type, owner, description, and associated data elements.
- •Select the asset type (Database, Application, Cloud Service, etc.)
- •Assign a data owner from your organization members
- •Link relevant data elements to this asset
Link Processing Activities
DPOAssociate the asset with its processing activities and legal bases.
Review and Save
DPOReview all details and save. The asset will appear in your data inventory and data flow diagram.