Everything your security team needs to say yes.

Control domains

1. Organization and governance
2. Access control
3. Devices and endpoints
4. Data handling
5. Personnel
6. Incident response
7. Sub-processors
8. Business continuity

How it reads

Each line carries a question, the answer and the supporting evidence. The completed pack is tailored to your account and delivered in the audit dossier.

What it records

1. Client and engagement
2. Categories of processing
3. Data subjects
4. Personal data
5. Location
6. Transfer mechanism
7. Security measures
8. Retention

How it reads

One line per engagement. Location is always your environment, and the transfer mechanism is the EU–Brazil adequacy decision.

What the notice covers

1. Client, engagement, notifier, date and time in UTC
2. When it was discovered and when it occurred
3. What happened and which systems are affected
4. Who is affected, and roughly how many
5. What data is involved
6. Likely consequences
7. Actions taken and actions proposed
8. Point of contact, then a dated update log

How it reads

One form per incident, with a running update log your team can cite directly in its own incident record.

Sections

1. Recipient, client entity and audit reference
2. Covering summary
3. Evidence index: request item, response, document, version
4. Signature

How it reads

Your request list becomes the index. Each row points to one versioned document, so the whole response files as a single bundle.

Checklist

1. Access revoked
2. Devices and tokens returned
3. Personnel register updated
4. Data returned or deleted
5. Open privacy requests handed over
6. Accounts settled
7. Records archived

Certificate

States the data and systems covered, the method and the date, signed by SolerWorks. See the full protocol.