Free incident response playbooks for GDPR, NIS2, and ePrivacy. Country-specific guidance for data breach notification, containment, and regulatory reporting.
Structured playbooks built for European compliance — when every hour counts
Clear checklists mapped to legal deadlines. Know exactly what to do in the first 24h, 48h, and 72h after a breach.
Each EU member state has its own DPA, reporting portals, and notification requirements. We cover all 27 countries.
Navigate the new NIS2 24h early warning and 72h full report obligations for essential and important entities.
Pre-written DPA notification letters and data subject communication templates, ready to customise and send.
Structured questions to determine breach severity, likelihood of risk to data subjects, and reporting obligations.
Document your response actions in real-time. Create a timestamped log that demonstrates regulatory compliance.
Tailored guidance for each EU member state's regulatory authority and notification portal
BSI notification via MeldePflicht-Portal. State-level DPA coordination.
GDPR + NIS2CNIL online portal with pre-notification and full notification phases.
GDPR + NIS2AP (Autoriteit Persoonsgegevens) online breach form. DutchDPA guidance.
GDPR + NIS2GBA/APD notification. Both French and Dutch language support.
GDPR + NIS2DPC Online Breach Reporting System. Lead supervisory authority for many multinationals.
GDPR + NIS2AEPD breach notification via Sede Electrónica portal.
GDPR + NIS2UODO online notification system. Polish language templates included.
GDPR + NIS2IMY (Integritetsskyddsmyndigheten) breach portal guidance.
GDPR + NIS2Full coverage: Austria, Czech Republic, Denmark, Finland, Greece, Hungary, Italy, Portugal, Romania, and more.
Complete CoverageDesigned by compliance professionals, hosted in the EU
Data never leaves the EU. Hosted on Hetzner servers in Germany. No US cloud dependencies.
Access all playbooks instantly. No email, no sign-up, no tracking. Your privacy is our default.
Regularly updated to reflect NIS2 transpositions, GDPR enforcement trends, and national DPA guidance.
Plain language, practical steps. No legal jargon. Built for companies without in-house compliance teams.