Processing records
Purposes, lawful bases, data categories, recipients and retention for each activity.
The workspace holds the day-to-day work behind data protection compliance: what data you process, which suppliers touch it, who owns each task and what evidence supports it. It is included when we prepare and file your CAR.
Built outward from privacy and third-party risk — the work organisations do today — and structured so a reviewer can follow the trail.
Purposes, lawful bases, data categories, recipients and retention for each activity.
A processor and sub-processor register with due-diligence questions, agreements and exit checks.
Assessment records, risk decisions and assigned follow-up actions.
Appointments, responsibilities, policies and review schedules.
Registers for data subject requests and incident response records.
Supporting records, owners, review dates and outstanding requests.
The workspace supports preparation and review. It does not certify compliance, and it covers the areas described on this page.
Each task connects to the person responsible and the evidence supporting it.
Document what data you use, why you use it, where it goes and how long you keep it.
Make responsibilities, preparation tasks and review dates visible to your team.
Connect policies, agreements and dated control records to the question being reviewed.
Capture questions, remediation and professional decisions before filing.
When Supreme prepares and files your CAR, workspace access is part of the engagement for the company involved.
The workspace is included for our audit clients. Want the workspace on its own? Request access →
The homepage demonstration shows the workflow with illustrative data. Open the demo →
Start with a CAR assessment and see how the workspace fits your team.