GET COMPLIANT
GDPR compliance
Audit, record of processing, policies and procedures: your Law 09-08 and GDPR compliance built on your real processing.
THE SCOPE
What this offer covers.
Solid GDPR and Law 09-08 compliance isn’t just publishing a privacy policy. It starts with an audit of your real processing to find the gaps that actually matter.
Those gaps are then fixed with an up-to-date record, policies and procedures built around your real practices, and contracts covering your processors and European clients. Nothing is copied from a generic template.
DELIVERABLES
What we deliver.
- 01Audit and mapping of processingInterviews, document review and sample checks to build a reliable baseline.
- 02Record of processing activitiesA GDPR Article 30 record, built from your real processing, not a template.
- 03Policies and procedures (rights, incidents, retention)The documents your teams actually use to answer requests and handle an incident.
- 04Processor and EU client contracts (DPA)The agreements needed to cover your providers and European clients.
You want to know where you stand and comply with Law 09-08, and with the GDPR if you work with Europe.
You only need to file your CNDP formalities.
WHEN YOU NEED THIS
- 01An audit, a client or an investor has flagged compliance gaps to fix.
- 02You work with European clients who require a GDPR Article 28-compliant DPA.
- 03Your record of processing doesn’t exist, or hasn’t been updated since the company was founded.
- 04You’re preparing a funding round or audit where data compliance will be reviewed.
HOW IT WORKS
Four controlled steps.
- 01AuditWe map your actual processing activities and compare your practices against Law 09-08 and GDPR requirements.
- 02PrioritiseGaps are ranked by risk to build a realistic roadmap, not a generic checklist.
- 03DocumentRecords, policies, procedures and contracts are drafted from your real processing, not generic templates.
- 04Roll outDocuments are implemented with your teams, and a handover session closes the project.
Buyer questions
How is this different from a GDPR audit alone?
An audit identifies gaps; GDPR compliance goes further and produces the documents and procedures that fix them.
Do we need to start over if we already have GDPR documents?
No, we start from what exists and only complete or correct what doesn’t match your real practices.
Does this cover Law 09-08 and the GDPR together?
Yes, both frameworks are handled together when both apply, without duplicating the work.
How long does a compliance project take?
Typically 4 to 8 weeks depending on the number of processing activities, entities and providers involved.