All templates are MIT-licensed and accept contributions. Open an issue if you spot a regulatory update we should incorporate.
Article 30 GDPR Records of Processing Activities — production-ready spreadsheet + JSON schema. Includes Controller and Processor variants and field-level guidance.
Data Protection Impact Assessment templates aligned with ICO methodology and Article 35 GDPR. Markdown + Word document + decision tree.
Plain-language Data Processing Agreement with EU SCCs Module 2 + 3 and UK IDTA Addendum. Drop-in clauses for sub-processors, audit, breach.
Pre-drafted Article 33 + 34 notification templates for 27 EU Supervisory Authorities + ICO + ANPD + PDPC + PPC + DPBI. Multi-lingual.
Designation letter, contact-publication snippet, and supervisory authority communication templates for Article 27 EU Representative arrangements.
Open-source React component for GDPR-/ePrivacy-compliant cookie consent with category-level granular control and Global Privacy Control honouring.
Section-by-section readiness checklist for India's DPDP Act 2023 + Rules 2025. Includes SDF criteria self-test and consent notice samples.
Notice-at-collection, financial-incentive notice, opt-out flow specs, and Global Privacy Control reference implementation.
Open an issue on the org page. We add new templates whenever a new framework gets published or our customers ask for one.