Apache-2.0GeneralData protection
Conducts Privacy Impact Assessment for large-scale systematic monitoring under GDPR Article 35(3)(c). Covers CCTV and video surveillance, employee monitoring, location tracking, internet monitoring, and behavioural analytics. Applies EDPB WP248rev.01 criteria for systematic monitoring of publicly accessible areas. Keywords: DPIA, large-scale monitoring, CCTV, employee monitoring, systematic monitoring, surveillance, location tracking.
Apache-2.0GeneralData protection
Conducts Privacy Impact Assessment for vendor and third-party data processing arrangements. Covers processor due diligence, Data Processing Agreement (DPA) requirements under GDPR Article 28, sub-processor management, cross-border vendor transfers, cloud service provider assessments, and ongoing vendor monitoring. Keywords: vendor PIA, processor assessment, DPA, Article 28, sub-processor, cloud privacy, third-party risk.
Apache-2.0GeneralData protection
Guides privacy program maturity assessment using the AICPA/CIPT Privacy Maturity Model with five levels: Ad Hoc, Repeating, Defined, Managed, and Optimized. Covers assessment methodology across ten privacy domains, scoring criteria, gap analysis, maturity roadmap generation, and benchmarking against industry peers. Keywords: privacy maturity, AICPA, maturity model, assessment, roadmap, benchmarking.
MITGeneralData protection
Use when drafting a public-facing privacy policy — the notice to users and data subjects explaining how personal data is collected, used, shared, retained, and protected. Covers GDPR (EU/UK), KSA PDPL, UAE PDPL (Federal Decree-Law 45/2021), and EG PDPL (Law 151/2020), with jurisdiction-specific legal-basis requirements, DPO obligations, international-transfer mechanisms, and subject-rights disclosures. Triggers on "privacy policy", "data protection notice", "data privacy statement", "cookie policy", or "personal data disclosure" requests.
MITGeneralData protection
Use when a lawyer or compliance officer needs to draft a comprehensive privacy policy for a company operating across one or more jurisdictions. Covers data collection, legal bases, retention, individual rights, international transfers, cookies, and privacy contact information. Particularly useful for MENA-operating businesses navigating UAE Federal Decree-Law No. 45 of 2021, Saudi PDPL, Lebanese data-protection norms, DIFC/ADGM Data Protection Law, and EU GDPR as applicable.
MITGeneralData protection
Use when a business needs to generate a privacy policy, cookie policy, ROPA, or DPIA template through a guided form. Supports KSA PDPL, UAE PDPL, DIFC DP Law, Bahrain PDPL, Egypt PDPL, GDPR, and CCPA — with jurisdiction-specific addenda for multi-jurisdictional businesses. Outputs DOCX and PDF; includes a ROPA template and DPIA template as add-ons. Free public tool with email-capture; designed for SMEs, startups, and app developers needing compliant privacy documentation without external counsel for standard use cases.
Apache-2.0GeneralData protection
Guides privacy program effectiveness measurement including leading and lagging indicators, KPI definition, benchmarking methodology, executive reporting formats, board-level privacy dashboards, and metric-driven program improvement. Covers operational, compliance, risk, and strategic privacy metrics across the program lifecycle. Keywords: privacy metrics, KPIs, benchmarking, executive reporting, dashboard, program effectiveness.
MITGeneralLitigation
Use when a litigation team must produce a privilege log as part of discovery or disclosure proceedings. Automatically processes a document set to identify privilege candidates, draft log entries with the required fields (date, author, recipient, privilege basis, description), and flag documents requiring attorney review. Covers attorney-client privilege and work-product doctrine under US, UK, DIFC, ADGM, and MENA procedural frameworks.
MITGeneralLitigation
Pre-flight check for legal content BEFORE it is sent to an external, cloud-based AI tool (browser chatbot, office-suite assistant, any API outside the firm's control). Inventories what actually sits in the prompt, scores five risk factors (client identifiability, facts under professional secrecy, litigation strategy and work-product, third-party personal data, AI provider terms), returns a banded verdict SAFE / CAUTION / STOP with a factor table and a disclosure-impact assessment, and for CAUTION prepares a redacted draft of the prompt for human approval. Sends nothing, never performs the final redaction. Use when: "can I paste this into ChatGPT", "does this prompt breach privilege", "privilege check before AI", "what to redact", "is this safe to send to a chatbot", law firm prompt audit, disclosure impact assessment before using cloud AI.