Governance, Risk & Compliance
The registers that are mandatory, dull, and never exist when somebody asks for them. Record what personal data you process and why, log a breach against the clock that matters, keep a gifts and hospitality register that stands up to scrutiny, and evidence the due diligence you did on a supplier before you appointed them.
Audit & Assurance
Plan the audit, run it to a checklist, and close every finding.
Governance, Risk & Compliance
Plan the year's internal audits — one row per planned audit, with risk-based frequency, auditor independence, planned against actual dates, deferral reasons and a coverage check that shows which high-risk processes are under-audited; for conducting the audits themselves use the internal audit checkl
Governance, Risk & Compliance
Track internal audit findings from report to closure — owners, due dates, extensions, overdue ageing and closure statistics, with a report ready for an audit committee. Runs entirely in your browser. Nothing is uploaded.
Governance, Risk & Compliance
Run ISO-style internal audits of your management system and processes — record each check with objective evidence, grade findings from OFI to major nonconformity, track corrective actions to verified closure and watch the conformity trend; for hazard walkrounds or workplace-organisation scoring use
Enterprise & Project Risk
Score risks the same way across the business, and track the treatments.
Governance, Risk & Compliance
Keep a project and business risk register — strategic, financial, operational and compliance risks scored on a 5×5 grid, inherent and residual, with the four responses and a board-ready report. Not a workplace safety assessment. Nothing is uploaded.
Ethics & Conduct
Record the gifts, the conflicts and the concerns raised.
Governance, Risk & Compliance
Record every gift and hospitality item given or received, test each one against your own approval and prohibition thresholds, and catch the cumulative annual total from a single counterparty that item-by-item checks always miss. Runs entirely in your browser — nothing is uploaded.
Privacy & Data Protection
Document what personal data you hold, why, and what happens when it leaks.
Governance, Risk & Compliance
Build a register of processing activities: purpose, data subjects, data categories, lawful basis, retention, transfers and impact assessments, with a gap list and a printable report. Runs entirely in your browser — nothing is uploaded.
Governance, Risk & Compliance
Log personal data breaches against the clock: hours from awareness to containment and to report, a likelihood-and-severity risk rating, deadline tracking and a printable register. Runs entirely in your browser. Nothing is uploaded.
DPIA Builder
Governance, Risk & Compliance
Work through a data protection impact assessment: screen whether one is needed, score each risk before and after controls, track who owns what, and print the assessment as a document. Runs entirely in your browser. Nothing is uploaded.
Also useful here
These live in another department but are regularly used by this one.