01 / Import and connect
Bring in DPIAs, RoPA registers, vendor lists, contracts, DPAs, policies, architecture diagrams and system inventories.
The connected platform
Approve once. Reuse across your whole privacy programme.
Acompli connects assessments, RoPA, risk, third-party oversight, data mapping, Code Scan and AI governance through one knowledge base, one review process and one audit trail.
Platform overview
One foundation.
Every module feeds the next.
Import your organisational knowledge once, then use it across assessments, RoPA, risk, third-party oversight, data mapping, Code Scan and AI governance. Every approved answer improves the next piece of work. In Acompli, an answer approved in one module is reused by the next rather than re-keyed.
01 / Assess
Assessments
GDPR & EU AI Act
Run DPIAs, LIAs, TIAs, processor reviews and AI Act assessments with templates, AI support and human approval.
Human-approved
02 / Detect
Risk
Privacy Risk
Extract candidate risks from approved evidence, assign treatment plans and report on current exposure.
Evidence-linked
03 / Record
RoPA
Article 30 Governance
Maintain Article 30 records linked to approved assessments, systems, suppliers and transfers.
Review-controlled
04 / Vendor
Third-Party
Processor & Transfer Risk
Record suppliers and processors once, then reference them across assessments, RoPA, risk and data mapping.
Reusable records
05 / Map
Data Mapping
Organisational Registry
Build a living view of systems, suppliers, locations, data categories and transfers.
Living map
Point tools create records. Acompli connects them.
Specialist tools
Different jobs from the core platform — so they’re priced on their own, never bundled into everyone’s licence.
Shared data model
The platform is a knowledge graph plus approval workflow
Systems, vendors, assessment answers, code findings and documents become approved facts in one shared knowledge base. Assessments, RoPA, risk, third-party oversight and data mapping reuse those facts with their source evidence and review history.
Entities captured once
- Systems
- Vendors
- Assessment answers
- Code findings
- Documents
Approved factCited, versioned, owned
Consumed by
- Assessments
- RoPA
- Data map
- Risk register
- AI Act governance
- Evidence packs
A fact approved once flows to every module that needs it — without re-keying.
Approval write path
AI drafts are not system records until a person approves them
Drafts become published records through source review and named approval. Version history records who approved each change and the evidence behind it.
- 01AI draftsExtracts, suggests, summarises
- 02Source reviewEvery value traces to evidence
- 03Named approvalA person signs the record
- 04Published recordNow a citable platform fact
- 05Version historyWho changed what, and when
AI never writes directly to the record of truth — the write path runs through a person.
How the platform works
From existing material to reusable compliance evidence
02 / Structure and enrich
Turn scattered material into reusable records: systems, suppliers, data categories, locations, transfer mechanisms and supporting documents.
03 / Assess and collaborate
Run structured assessments with relevant context already available, clearer contributor guidance and reviewer-ready answers.
04 / Draft and verify
Use AI to draft responses, RoPA fields, risks and summaries while flagging low-confidence or unsupported claims for review.
05 / Review and approve
Keep humans in control. Nothing becomes a published record, final risk or approved assessment without review and sign-off.
06 / Reuse and report
Approved work feeds risk, RoPA, data maps, supplier records, precedents, dashboards and evidence packs. Acompli links each downstream record back to the approval that produced it.
Comparing the market
How do privacy governance platforms compare, and which is best?
Privacy governance platforms differ most in whether they connect records or just store them: whether one approved assessment feeds the RoPA, DPIA, risk register, vendor file and AI system inventory, whether a named human is accountable for each record, and whether every field traces back to the evidence behind it. Acompli is built around that connected, human-approved model across GDPR and the EU AI Act rather than a set of separate tools. For a balanced, unbiased comparison of the available suppliers - evidence-based, drawn from public sources, and honest about where competitors are stronger than Acompli - we have compiled capability charts and vendor-by-vendor breakdowns for you to consider in our full comparison library.
See the connected workflow in action.
Run one assessment and watch the downstream record build around it.