Built for GDPR from the ground up

Compliant by design, not by checkbox.
Data Processor Agreement

Subprocessors

We’ve partnered with various providers to offer a reliable service. All of our partners have a great security track record, take personal data privacy seriously, and are fully compliant with GDPR. We have a Data Processing Agreement (DPA) with each of them.

To be fully transparent, here is the complete list of providers who come in direct contact with our users’ personal data:

Name

Services

Location

GDPR Compliance

DPA In Place

Microsoft

Office 365, Azure Hosting

EU

✅

Pipedrive

CRM

EU

✅

Moneybird

Accounting

EU

✅

Make

Automation

EU

✅

Stripe

Payments

Global

✅

Webinargeek

Webinars

EU

✅

Delighted

Customer Satisfaction

Global

✅

Usetiful

Customer Onboarding

EU

✅

GetAccept

Proposals

EU

✅

Calendly

Call scheduling

Global

✅

tl;dv

Call recording

EU

✅

Hubspot

CRM, Customer Support

Global

✅

GDPR Compliant by Design

GDPR compliance is not an afterthought here

ISOPlanner™ is built and operated in full compliance with the General Data Protection Regulation. That means every  decision about how we collect, store, process and protect personal data is made with GDPR requirements as the  baseline, not the finish line. As a platform used by compliance professionals, we hold ourselves to the same standard  we help others meet.

What GDPR compliance means in practice

We collect only the data we need. We store it in the EU. We do not sell it, share it unnecessarily, or process it for  purposes beyond what is agreed. Access to personal data is controlled, logged and restricted to those who need it. Our   data processing agreements are clear, our sub-processors are documented, and our retention policies are enforced.

1
Embedded ML
API Calling ML
2

Your rights as a data subject

Under GDPR, you have the right to access your data, correct it, delete it, and object to how it is processed. We  honour all of these rights without friction. Requests are handled within the legally required timeframe. There is no  legal small print designed to make exercising your rights difficult.

For your auditor and your DPO

If your data protection officer needs documentation, a data processing agreement, or information about our  sub-processors and data flows, it is available. We do not make compliance professionals chase us for the information  they need to do their jobs.

3
ML Platform

Processing register to breach notification, DPO + auditors have a complete picture.

Book a demo