Grace Connect Data Protection framework is made-up of modules designed to ensure full compliance with privacy requirements as defined by GDPR.

In addition, specific modules have been developed to perform data privacy impact assessment and to formalize the registry of data processing activities, all of which natively linked with Grace Connect Process Management module.

Grace Connect GRC Suite includes a full set of modules dedicated to the management of Data Privacy risks.

A Registry of Processing Activities (“ROPA”) is included in the GRC Suite, with the aim to collect all relevant information on data processed on main activities. A module is designed to perform a Data Protection Impact Assessment (“DPIA”), which is required any time a new project is started to identify and assess risks related to sensitive information. A specific GDPR compliancy assessment module is also integrated in the GRC Suite.