Living records.
Structured updates.
Human-reviewed outputs.

One platform for assessments, risk registers, and Article 30 records — connected to the systems, suppliers, and evidence behind them.

Get started See how it works

The workflow

Six stages from knowledge to compliance

Each stage builds on the last. Each completed assessment makes the next one better. This is the intelligent data lifecycle.

Choose your assessment

Every workflow begins by selecting or building an assessment template. The AI template builder auto-tags every RoPA-affiliated field — Article 30 mapping happens before a single answer is written.

The AI template builder automatically tags every RoPA-affiliated question field as it generates your template. Article 30 fields — legal basis, data categories, recipients, retention periods — are mapped before a single answer is written, so your Records of Processing Activities populate without any manual configuration.

Assessment Library

DPIAs, LIAs, TIAs, vendor due diligence — pre-built and ready to run.

AI Template Builder

Describe your processing activity — Acompli generates a tailored assessment with all RoPA fields pre-tagged.

RoPA Auto-tagging

Article 30 fields are identified and mapped at template level — no manual configuration required.

Connect your organisation's knowledge

Before a single answer is generated, Acompli learns your world. Three knowledge bases feed every assessment — each a distinct, grounded source of truth.

Three knowledge bases feed every assessment: your project-level documents (contracts, transcripts, DPAs, architecture diagrams), your organisational registry (IT systems, suppliers, locations, data categories), and assessment context provided by the assessor. Each is a distinct source of truth — grounded, searchable, and always current.

Knowledge

Project DocumentsContracts, DPAs, retention schedules — parsed and indexed.

Org RegistryIT systems, processors, locations — data categories and contracts.

Assessment ContextWhat the assessor describes about the processing activity.

Three agents assemble the evidence

Three specialist agents search your data in parallel and compile a structured intelligence brief. All three are read-only by design — enforced at the tool registry level.

KB Intelligence

Searches your registry — systems, processors, locations — to build a relevance map for each question.

Read-only · KB, entities, regulatory docs

Document Analyst

Searches project docs and images — contracts, DPAs, architecture diagrams, consent records.

Read-only · Documents, images

Archive Researcher

Searches past assessments and DPO-approved precedents for historical context.

Read-only · Archive, precedents

Compiled →Structured Intelligence Brief staged to project document library

AI writes with your evidence in front of it

The model runs with full context: entity registry, project documents including the intelligence brief, and approved precedents. Every answer is grounded in your data — then verified.

DPIA — Employee Monitoring System

Processing purpose & lawful basisGrounded

Data categories & retention periodsGrounded

Necessity & proportionalityReview

Transfer impact assessmentPrecedent

Rights & freedoms risk analysisGrounded

Risk mitigation measures3 Flagged

Advisory co-pilotExplains what “good” looks like for every question

Polishes wording on demand, in bulk or per question

Every claim checked against your records

Post-generation verification. Each claim is checked against two layers of your own data. Ungrounded claims are flagged — not silently passed through.

Layer 1 — Entity Registry

Named systems, vendors, and locations verified against your registry. Unregistered entities flagged.

Layer 2 — Uploaded Documents

Retention, safeguards, legal mechanisms searched. Matches cited with document, section, page.

Sensitive Claim Scrutiny

Art. 6, Art. 9, international transfers, data subject rights — mandatory review if unsupported.

Sensitive claims — legal basis under Article 6, special category data under Article 9, international transfers, and data subject rights — receive mandatory additional scrutiny regardless of their general grounding score.

Review priority queue

FlaggedHighMediumLow

Risks extracted. RoPA drafted. Automatically.

Upon DPO approval, four processes execute simultaneously. Every output carries full provenance — trace from a RoPA record back to the original evidence in one click.

Risk Register

Risks extracted with provenance

Each risk carries severity, category, source assessment, and a link to the original question and answer.

RoPA Records

Article 30 fields auto-populated

Legal basis, data categories, recipients, retention — populated from responses.

Assessment archived and searchable

AI-generated summary, structured tags, and risk levels — embedded and indexed.

Precedents

Best answers become standards

High-quality answers surfaced as candidates. The DPO curates which become authoritative.

Every assessment makes the next one better

The programme improves continuously — through the compliance work your organisation is already conducting. Context survives people changes. Institutional knowledge compounds.

Compound

Registry

See the workflow in action

Run your first assessment with Acompli's full intelligence pipeline. Your organisational knowledge becomes the foundation of every compliance decision.

Get started →Explore the platform

Living records.
Structured updates.
Human-reviewed outputs.

Six stages from knowledge to compliance

Choose your assessment

Assessment Library

AI Template Builder

RoPA Auto-tagging

Connect your organisation's knowledge

Three agents assemble the evidence

KB Intelligence

Document Analyst

Archive Researcher

AI writes with your evidence in front of it

Every claim checked against your records

Layer 1 — Entity Registry

Layer 2 — Uploaded Documents

Sensitive Claim Scrutiny

Risks extracted. RoPA drafted. Automatically.

Risks extracted with provenance

Article 30 fields auto-populated

Assessment archived and searchable

Best answers become standards

Every assessment makes the next one better

GDPR RoPA Requirements in Ireland and the UK

Council Agrees “AI Omnibus” Mandate: High-Risk Deadlines Pushed to 2027/2028

GDPR Fine Calculator

See the workflow in action

Living records.Structured updates.Human-reviewed outputs.

Six stages from knowledge to compliance

Choose your assessment

Assessment Library

AI Template Builder

RoPA Auto-tagging

GDPR RoPA Requirements in Ireland and the UK

Council Agrees “AI Omnibus” Mandate: High-Risk Deadlines Pushed to 2027/2028

GDPR Fine Calculator

See the workflow in action

Living records.
Structured updates.
Human-reviewed outputs.