• User profiles and permissions management (multi-user software)
• Management of the objects present in the project according to three states (drafting, management, terminated)
• Tracking changes of objects in the management state present in the project
• Projects based on LOCAL or CLOUD databases
• Processing analysis
• ISO 27000 Risk Analysis (ISO 27001 and ISO 27701 - analysis and security measures)
• ENISA Risk Analysis (analysis and risk treatment plan)
• Project check (individual data, groups of data, and sections)
• Export and import of processing activities
• Export and import of tables for customizing the work environment
• Duplication of projects based on local databases
• Customization of document templates to be used for document production
• Automatic generation of records of processing activities
• Automatic generation of appointment and revocation letters for different roles
• Automatic generation of privacy notices and consent requests
• Generation of the privacy organisational chart
• Execution of DPIA - Data Protection Impact Assessment (CNIL methodology)
• Management of personal data breaches
• Personnel training management
• Management of data subjects' requests
• Cloud storage of generated and attached documents
• Compliant electronic storage of generated documents and those uploaded to the system
• Remote acceptance of documents requiring a signature for receipt

• General activity data
• Activity offices
• Organizational structures of the activity
• Active subjects in the processing
  • Data Controllers
  • Joint Controllers
  • Representatives of the controller and processor
  • Data Processors
  • Data Protection Officers (DPOs)
  • Authorized Persons
  • Recipients
• Processing activities
• Operational modalities of the processing
  • Collection of personal data
  • Personal data lifecycle
  • Conditions art. 9
  • Conditions art. 10
  • Automated decisions and profiling
  • Transfers
  • Data location and supporting assets
• Roles in processing activities
  • Data Controller (project owner organisation)
  • Controller's Representative
  • Joint controllership agreements
  • Data Processor (project owner organisation)
  • Processor's Representative
  • Sub-processors
  • Data Protection Officer (DPO)
  • Data Processors
  • Recipients
  • Authorized Persons
• Risk Analysis - ISO 27000 (ISO 27001, ISO 27701)
• Risk Analysis - Security measures
• Risk Analysis - ENISA
• Risk Analysis - Treatment plan
• Impact assessment - processing subject to DPIA
• Predefined tables at account level
• Predefined tables at single project level
• Document templates and styles
• Regulatory Repository
• Management - personal data breaches
• Management - personnel training
• Management - privacy organisational chart

• Over two hundred processing activities grouped into categories:
  • General and specialized
  • Corporate, professional, local government, healthcare, educational sectors
  • Municipal administrations
  • Pharmacies
• Dozens of predefined tables containing pre-entered data grouped by categories:
  • General: activity category, office type, corporate roles, ...
  • Processing: data typology, categories of data subjects, processing purposes, recipients, ...
  • Risk analysis: threats, vulnerabilities, countermeasures, ...
  • Document structures: appointments, job descriptions, privacy notices, consent collection, regulations, ...
• Over forty pre-entered document templates associable with generation, by groups:
  • Risk analysis: identification, analysis, risk weighting, treatment plan, ...
  • Data subjects' rights: privacy notices (art. 13 and art. 14), for minors, consent collection, ...
  • General: Privacy Organizational Model, IT and Video Surveillance Regulations
  • Job descriptions: appointment and revocation letters specific by role, authorizations, proposals, ...
  • Records: processing activities of controller, processor, representatives, ...
• Editing and duplicating predefined document templates

Privacy Evo automatically builds a tree structure of all the documentation that can be generated in the current project and allows you to have an immediate overview of the tasks to be performed.
This structure keeps track of changes made over time to the organisational structure, to processing activities, and generally certifies the operations carried out.

• Appointments and revocations of Data Processors
• Proposal of the sub-processor's name to the Data Processor
• General and specific authorization to appoint sub-processors
• Appointments and revocations of Data Protection Officers
• Contact data of Data Protection Officers
• Appointments and revocations of Representatives of Controllers and Processors
• Specific appointments and revocations for System Administrators, Credential Custodians, ...
• Appointments and revocations of generic Authorized Persons and customizable for other specific roles
• Automatic generation of privacy notices
• Generation of privacy notices specific for minors and minors under 16
• Generation of consent requests
• Generation of consent requests specific for minors and minors under 16
• Records of processing activities of Controllers, Processors, and their Representatives, where necessary
• Risk assessment: identification of risks, vulnerabilities, threats, and calculation of impacts
• Risk assessment: assessment of probability, exposure, and relative acceptance criteria
• Risk assessment: identification and evaluation of countermeasures, risk treatment plan
• Data Protection Impact Assessment (DPIA) and action plan report
• Communication of data breaches to the Supervisory Authority

• Detailed online help with search functions
• Printable user manual in PDF format
• Extensive presence of contextual help (Advanced tooltips) that can be disabled by the user
• General contextual audio guides and for specific functions
• General video guides, for specific functions and software learning
• Opening of support tickets directly from the application
• Remote support with operator (upon granting the necessary authorization)

• Generative Artificial Intelligence integrated into the system (GénIA)
  • Generation of descriptive text
  • Identification of contextual data
  • Management of structured data
  • Global analysis of a business from various documentation
  • Identification and definition of processing activities
  • Execution of ISO 27000 risk analysis for a processing activity
  • Execution of DPIA for a processing activity
  • Identification of legal bases (GénIA Lex)