CodeB · Standards & compliance

Compliance config — DPIA & RoPA values

What this does. Fields you enter here are rendered into /dpia.html and /ropa.html in place of the shipped [fill in] placeholders. Blank fields keep the placeholder as-shipped. Values are stored per tenant under App_Data/<tenant>/compliance-config.json; nothing leaves this host.

Legal reminder. These are your organisation’s Article 30 RoPA and Article 35 DPIA records. Aloaha stores what you type; the accuracy, completeness, and legal sign-off are yours. Consult your DPO or legal counsel before publishing.

Preview DPIA (opens rendered page) Preview RoPA (opens rendered page) Privacy manifesto

Controller identity used in RoPA A.1 and DPIA sections 1.3 & 7

Legal name of controller

Registered address

Company / registry number

Data-protection contact

email + postal address for GDPR queries

DPO name

DPO contact

email + phone; leave blank if no DPO appointed

EU representative (Art. 27)

required only for controllers outside EU/EEA

DPIA administrative DPIA section 1.3

Tenant operator (short name)

Assessment date

DPO consulted (date)

Reviewer name

Next review due

DPIA version

DPO consultation record DPIA section 7

DPO opinion

accept / accept with conditions / reject — free text

Conditions imposed

Article 36 prior consultation triggered?

Data-subject consultation (Art. 35(9))

DPIA sign-off DPIA section 8

Controller signatory (name)

Controller sign-off date

DPO signatory (name)

DPO sign-off date

Reviewer signatory (name)

Reviewer sign-off date

Next-review calendar date

RoPA specifics RoPA A.5–A.9, B.1–B.5

Processor address (B.1)

registered address of Aloaha entity acting as processor for SaaS deployments

Third country — self-host (A.6)

Third country — SaaS region (A.6)

AI transcription region (A.6)

Consent-capture mechanism (A.9)

Consent-evidence retention

Withdrawal mechanism

Consent version / hash

DPA version + date (B.5)

Retention overrides RoPA A.7 — informational; actual retention is set by server config

Audit logs

Metric counters

Transaction records

PID persisted to user record

Backup files