GDPR Readiness & Privacy Evidence Support
Organize privacy governance evidence for customers, vendor due diligence, data-processing reviews, and cross-border commercial assurance.
Designed for real buyer requests, not generic certificate shopping.
AQX starts with the requirement, the intended use, and the evidence already available. That keeps the route practical before the applicant commits budget.
Best-fit applicants
SaaS platforms, service providers, online education, HR tech, healthtech, and data processors handling personal data.
Commercial use
Companies that need to answer customer privacy questionnaires or provide structured privacy evidence.
Before you pay
Teams preparing for ISO/IEC 27701, privacy notice support, or a broader data protection program.
Common reasons this page becomes urgent.
- A customer asks for GDPR evidence, a DPA, subprocessors, retention controls, or data subject request handling.
- The company must explain privacy roles, data categories, transfers, and security measures during procurement.
- Internal records are scattered and need to be organized into a buyer-ready evidence pack.
What AQX reviews
- Controller/processor role, data categories, processing purposes, subprocessors, transfer context, and retention approach.
- Privacy notices, DPA language, data subject request procedures, breach process, training, and security control evidence.
- Whether GDPR readiness, ISO/IEC 27701, ISO/IEC 27001, or buyer-specific support best fits the request.
AQX reviews route suitability before payment. If the file is not eligible or the requirement does not fit the available route, the applicant can avoid unnecessary spend.
Documents that usually speed up review.
- Privacy notice
- Data processing agreement
- Record of processing activities
- Subprocessor list
- DSR and breach procedures
- Security and retention evidence
Review first. Fixed package second. Issue only when the file is ready.
Requirement check
Send the buyer wording, intended use, holder name, country, activities, and any deadline.
Scope and evidence review
AQX maps what the certificate or support route should cover and which documents are missing.
Decision and public record
Where eligible, the final record shows holder, scope, route, issue dates, validity, and verification status.
What applicants usually ask before choosing this route.
Is this legal advice?
No. AQX supports evidence readiness and buyer assurance. Legal interpretation should be confirmed with qualified counsel.
Can this help with customer questionnaires?
Yes. The work is designed to translate privacy controls into clearer customer-facing evidence.
When should ISO/IEC 27701 be considered?
When the buyer expects a privacy management system signal rather than only GDPR policy documents.
Compare before you apply.
Certification buyers often use different words for similar goals. These pages help you compare standards, industries, and support routes before submitting a requirement.
Send the requirement before you spend on the wrong route.
AQX can review the buyer wording, scope, and evidence fit. Initial review is available within 48 hours where eligible, with fixed packages from $398 to $1,599.