"The email platform we needed didn't exist. So we built it."

Jesse Hanley, Founder at Bento

^®

Pricing EnterpriseOur Data AI

Compliance Checklist

Bento's ongoing efforts to maintain GDPR compliance across lawful basis, security, governance, and privacy rights.

Conduct an information audit to determine what information you process and who has access to it.Not Applicable Have a legal justification for your data processing activities.Completed Provide clear information about your data processing and legal justification in your privacy policy.Completed Take data protection into account at all times, from the moment you begin developing a product to each time you process data.Completed Have a process in place to notify the authorities and your data subjects in the event of a data breach.Completed Encrypt, pseudonymize, or anonymize personal data wherever possible.Completed Create an internal security policy for your team members, and build awareness about data protection.In Progress Know when to conduct a data protection impact assessment, and have a process in place to carry it out.In Progress Designate someone responsible for ensuring GDPR compliance across your organization.Completed Sign a data processing agreement between your organization and any third parties that process personal data on your behalf.Completed If your organization is outside the EU, appoint a representative within one of the EU member states.In Progress Appoint a Data Protection Officer (if necessary)Not Applicable It's easy for your customers to request and receive all the information you have about them.Completed It's easy for your customers to correct or update inaccurate or incomplete information.Completed It's easy for your customers to request to have their personal data deleted.Completed It's easy for your customers to ask you to stop processing their data.Completed It's easy for your customers to receive a copy of their personal data in a format that can be easily transferred to another company.Completed It's easy for your customers to object to you processing their data.Completed If you make decisions about people based on automated processes, you have a procedure to protect their rights.Completed