Frequently asked questions

Most teams complete their first DPIA within the first week, with AI handling the initial draft and the team refining from there. By the end of the first month, teams typically have several completed assessments, auto-populated RoPA entries, and a risk register that links back to source evidence — all audit-ready.

Acompli handles the administrative and documentation work — template generation, answer enhancement, risk extraction, and RoPA drafting — so your team can focus on the decisions that require human judgement. You remain in control of approvals, risk tolerance, and governance.

Yes. Acompli generates tailored DPIA templates based on your scenarios, but it works best alongside your existing policies and governance framework. It helps you apply those policies consistently and capture the evidence.

Absolutely. Workflows, roles and stages are configurable. You can keep things simple or model a more detailed approval process. The aim is to fit Acompli to your organisation, not the other way round.

The people completing assessments see a guided, straightforward experience: clear questions, focused help and tools to refine their own answers. The more advanced features – workflow configuration, risk views, RoPA management – are available to those who need them.

Approved assessments automatically generate draft RoPA entries and risk register items for review. The Knowledge Base captures systems, vendors and locations mentioned in responses, improving AI context for future assessments. Everything links back to source evidence.

Your data is stored within the platform with encryption and role-based access controls. AI features produce reviewable suggestions with confidence indicators and audit history. For OpenAI API processing, OpenAI may retain API inputs and outputs for up to 30 days for abuse monitoring unless configured for Zero Data Retention where eligible, and OpenAI does not train on API inputs/outputs by default unless an organisation explicitly opts in.

Every AI output includes a confidence score. High-confidence outputs are typically accurate; lower scores indicate where human review should focus. Nothing publishes without approval – the DPO review queue ensures accountability and full audit trails.

No. It is designed so that a single privacy lead in an SME can get value quickly, but it can also support more complex approval chains and reporting requirements in larger organisations.

Yes. Acompli supports Excel imports, CSV bulk imports for systems and third parties, and manual data entry. AI helps map your existing structure to Acompli's format, so migration does not mean starting from scratch.