---
title: "GDPR audit and certified outsourced DPO | Klicat"
description: "GDPR audit, record of processing, DPIAs, privacy by design, staff awareness and a certified outsourced DPO, with the Dplex tool."
url: https://klicat.com/en/expertise/gdpr-dpo
language: en
---

# Your GDPR compliance, handled end to end

We audit your compliance, build your record of processing activities, carry out your impact assessments, train your teams and can take on the data protection officer role, with a certified DPO.
[Write to us](https://klicat.com/en/contact?topic=rgpd)

## What we do

### Audit

Identify each point of non-compliance and propose a remedy for it.

### Record and DPIA

Build the record of processing required by Article 30 and carry out the impact assessments needed.

### Project support

Build compliance into every stage of a project, from its design (privacy by design).

### Awareness

Train staff in the right habits, department by department.

### Outsourced DPO

Take on the data protection officer role, with a certified DPO.

### Record keeping

Keep your records in Dplex, the online tool we designed to make GDPR simpler.

## Our approach

Every situation is different: we start from yours.

### Initial review

Half a day to assess your situation and hand you a first action plan.

### Audit preparation

Choose who to meet, schedule the interviews, gather the existing documents.

### Interviews

Meet the selected departments to identify the processing of personal data.

### Mapping

Draw up the record of processing from the interviews.

### Gap analysis

Review the information collected and the documents provided against the regulation.

### Action plan

Hand you actions ranked by priority according to the risks identified.

## Frequently asked questions

### Does my organisation have to appoint a DPO?

It is mandatory for public authorities and bodies, and for organisations whose core activities involve regular and systematic monitoring of people on a large scale, or large-scale processing of sensitive data (Article 37 GDPR). In other cases it is recommended.

### Where should we start?

With the initial review: half a day that produces an assessment and a first action plan, even if you have already started work.

### Do you use Dplex during the assignment?

Yes, if you wish: your record, impact assessments and action plan are kept in Dplex, and you can access them at any time.

## Our other areas of expertise

- [PlatformsOur ready-to-use online solutions, for ten different trades.](https://klicat.com/en/platforms)
- [ConsultingProject ownership and project management assistance for your digital projects and website redesigns.](https://klicat.com/en/expertise/digital-consulting)
- [HostingYour websites on dedicated servers in Europe, with advice, support and assistance from Klicat.](https://klicat.com/en/expertise/hosting)

## Let's talk about your situation

A first conversation is often enough to know where to start.
[Write to us](https://klicat.com/en/contact)