Build your data inventory and records of processing
How do I create a record of processing activities (RoPA) for a small business?
List each thing you do with personal data (taking orders, email marketing, analytics), why, on what lawful basis, which data and whose, which systems and recipients are involved, and how long you keep it. Privara starts the list from the vendors your website scan found, says what each suggestion is based on, and you confirm.
Start from what's really there
Most small businesses' personal data flows through the tools on their website: the shop platform, analytics, email marketing, chat. Privara turns the vendors in your reviewed tracker inventory into suggested systems, and their purpose categories into suggested processing records.
What each suggestion tells you
- What it used: the trackers seen and the catalog entry.
- What it inferred: typical data categories for that kind of tool, and a lawful basis to consider (never a determination).
- Whether AI drafted the wording (from vendor names only, never personal data; switched off without an AI key).
Then make it yours
- Edit every field: purpose, lawful basis, data categories, whose data, recipients, transfers, retention, security measures, sub-processors.
- Add systems that aren't on your website: payroll, your inbox, spreadsheets.
- Export as CSV or PDF; unconfirmed suggestions are marked.
Which plan
Every plan includes the data inventory, and you can start before choosing one: set up free with 1 website and scans of up to 25 pages. Privara is not legal advice. It reports what a browser saw and helps you organize the work; you and your advisers decide what applies and whether you comply.