Keyed DSMS

The Skeptic

The help center confirms genuine modules for records of processing, impact assessments, TOMs and data recipients, with records generatable from an existing impact assessment and an inheritance feature for groups — better than copy-paste. But the evidence is mostly help-article titles: we found no public information on legal bases linked in the record model, DPIA triggers derived from the record, or outputs a supervisory authority has accepted, so the depth of the connections stays unevidenced. 7 8 10

Report an error

The Skeptic

Data subject requests and a deletion concept appear only as names in a coverage list, while external communications get linked tasks with reminders and breach tasks trigger daily notifications tied to the 72-hour duty — clock awareness via reminders, not deadlines automated end to end. We found no public information on request intake channels, identity checks, breach severity assessment, authority-report output, or any evidence that deletion rules are executed and tracked rather than documented. 8 9 10

Report an error

The Skeptic

GDPR is the operational core, and the AI Act appears as a separate AI-management product plus its own audit template — a second island, not one record mapped across regimes. We found no public information on national variants, Swiss or UK regimes, or any documented update cadence when the law moves. 3 1 10

Report an error

The Skeptic

This is the best-evidenced part of the product: risk audits ending in a risk matrix, conformity audits with a per-chapter score, templates from the vendor's own lawyers or custom-built, configurable recurrence with results persisting on the object, group-wide control with reporting levels, and period reports spanning every core register in a custom layout. The versioning claim, however, covers audit communication specifically; we found no public information on revision-safe change history across all records, auditor access roles, or a defensible answer to 'show me the state on date X'. 8 10 11

Report an error

The Skeptic

The automation on display lives inside the product — recurring audit cycles, deadline reminders, a document generator — and SSO appears only as an Enterprise-tier feature; we found no public information on an API, directory or ticketing connectors, or import paths from the real IT estate. The captured pages also give different figures for effort reduction (50% less effort, up to 70%, and up to 50% time savings), so the promised savings are not consistently quantified anywhere. 1 2 9 10

Report an error

The Skeptic

A German GmbH with '100% EU-Server' claimed as standard and development in Münster is the right shape, but that is where the public trail ends. We found no public information on a data processing agreement, a subprocessor list, named data centers, or the ownership behind the entity — for a system holding your records of processing, that silence is the deciding fact. 5 8 10

Report an error

The Skeptic

Three of four tiers carry real figures with billing period and company limits stated (0 €, ab 99 € monatlich, ab 299 € monatlich), and consulting is offered as a separate path from the software. The 'ab' wording leaves every scale step above the floor unpriced and Enterprise is Auf Anfrage, so a multi-company buyer still cannot compute the invoice from public pages alone. 1 10

Report an error