Digitizing and automating GDPR

GDPRfolder makes the GDPR accessible to SMEs. Instead of relying on expensive, time-consuming lawyers and consultants, companies can audit their GDPR risk autonomously, improve and demonstrate their compliance, and keep up with the evolving best practices the regulation demands.

Decision-making automation

GDPRfolder — Domains

Making the right decision is a constant challenge — so what if an application could make it for you?

A key part of GDPR is making the right decisions to protect private data. The regulation is complex: a multitude of cases, conditions, local implementations, and grey areas. To handle that complexity, we built an algorithm that decides on the user’s behalf. It combines:

  • a model of the law and its decision criteria, and
  • a decision tree covering different geographies and sectors.

Decision-making algorithms like this have real potential to cut the cost of expertise and reach conclusions faster.

Technologies: Elixir (especially for pattern matching)

Automated document drafting

GDPRfolder — Generated PDF

What if your next contract could write itself?

To help users prove their compliance, we built an automated drafting engine that:

  • writes a coherent legal document,
  • adapts the text to the user’s data and the decision-making engine, and
  • delivers a high-quality PDF with hyperlinks, a table of contents, and more.

Compared with a traditional lawyer’s pricing and turnaround, the engine produces a 50-page legal document as a PDF in under three seconds.

Technologies: Elixir (document generation), LaTeX (PDF rendering), Amazon S3 (PDF storage)

Handling large volumes of multilingual text efficiently

Translating every piece of text quickly becomes time-consuming — and should a release really wait on the last French translation?

GDPRfolder — Gettext

We needed to manage translations in French, Dutch, and English efficiently, and legal texts are long, with no room for approximate wording. So we built a system, integrated with Phrase, that:

  • pushes translation requests,
  • lets us hire and manage external translators,
  • pulls translated texts, and
  • flags missing translations.

Integrating with Phrase sped us up dramatically, saved days of work, and reduced the chance of human error across a complex corpus.

Technologies: Gettext (internationalization and localization), Phrase (translation management)

Online payment with multiple business models

GDPRfolder — Subscription

Online payment is nothing new, but choosing the right tool can be cost-effective and speed up development.

The project needed several business models, such as a direct subscription and a subscription through a reseller taking a fee. The team also wanted to stay informed about sales. So we implemented:

  • a credit-card subscription with Stripe,
  • a dashboard for resellers to track their sales, and
  • short, automated Slack messages triggered by new payments.

Together, this forms a full-fledged payment system that outsources the cost of financial security for a reasonable fee.

Technologies: Stripe (payment processing), Slack (team messaging)

Embeddable badge for client websites

GDPRfolder — Badge

Letting users embed a badge on their website is a great way to promote the service.

We built a certification badge so clients can display their level of GDPR compliance. They simply copy and paste a snippet onto their site, and our server returns the badge matching their level.

Technologies: HTML iframe