GDPRLedger governs your GDPR baseline — and responds when real things happen. Build your evidence record task by task. When a data breach, DSAR, new supplier, or regulatory enquiry arrives, the platform opens an event workspace, guides the response, generates the documents, and adds it to your evidence pack. Automatically.
GDPRLedger doesn’t do the work for you — it governs the proof that you did it. Build your baseline through the programme. Handle what happens next through events. Both tracks produce evidence that goes into the same pack.
Answer 42 questions about your organisation. GDPRLedger maps your obligations and sequences the programme accordingly. No two programmes look the same.
Each task shows the statutory requirement in plain English, a checklist of what your evidence must include, an illustrative example, and a Document Generator to produce a first draft tailored to your organisation.
The Document Generator produces a draft from your organisation context. You review, edit, and confirm. A dated, signed PDF is auto-attached to your evidence pack. You are the author — GDPRLedger governs the record.
A SHA-256 tamper-evident export captures every task completed, document uploaded, and decision recorded — with timestamps. Yours permanently, regardless of your renewal status.
A DSAR arrives. A breach is discovered. A new supplier is engaged. A staff member joins or leaves. A regulator makes an enquiry. These are compliance events — and they happen whether or not your programme is complete.
Select the event type. Answer a short set of questions. GDPRLedger opens an event workspace, assigns a reference number, and starts any applicable deadline clock —72 hours for a breach, 30 days for a DSAR.
The platform generates the required documents, tracks the steps, and keeps the audit trail. Handling a real DSAR automatically completes the DSAR procedure task in your programme. Real events count as evidence.
Every event response is logged, timestamped, and added to your evidence pack alongside your programme tasks. A regulator asking “how did you handle this?” gets a documented, dated answer.
Not legal advice · Governance activity record only · Practitioner review recommended for complex situations
Things happen in the life of every business. GDPRLedger handles them in a governed, documented way from day one — without waiting for the programme to finish.
Professional services firms don’t just hold their own data — they hold their clients’ data and sensitive AML records with statutory retention obligations that actively conflict with GDPR. That’s a categorically different compliance posture.
You determine the purposes and means of processing your own operational data — customer records, staff data, marketing, suppliers. GDPR’s full framework applies in its general form.
You control your own data, process your clients’ data as their processor, and operate under MLR 2017 / POCA 2002 which impose AML obligations that directly conflict with GDPR’s erasure and storage limitation principles.
The second pack is a client-shareable governance summary for onboarding, due diligence, and tender support. Both packs are yours permanently — regardless of your renewal status.
“We don’t do the work. We govern the proof the work was done.”GovProtocol · GDPRLedger
Pay once to build your baseline. Annual renewal keeps your event workspace live and your programme current. Your evidence pack is yours permanently — regardless of renewal status.
Sole traders, freelancers, micro businesses
SMEs with customers, staff, or supplier relationships
AML-regulated accountancy and legal firms
Complete GDPRLedger Pro for your own firm — then refer your SME clients to Standard and earn 20–25% commission on every purchase and renewal. You’re already in the room when the compliance conversation happens. Your governance record becomes your referral credential.
Plain-English guides to GDPR obligations, derived from UK GDPR (DPA 2018 / DUAA 2025) and ICO guidance. EU GDPR guides also available.
For questions about your programme, account access, billing, or technical issues, contact us by email. We aim to respond within two business days.
Email: support@gdprledger.com
GDPRLedger is a digital access product. Because access is granted immediately on payment, we do not offer refunds once your account has been activated and you have accessed the programme.
If a technical issue prevents access, contact us within 14 days. Customers in the EU also have access to the EU Online Dispute Resolution platform.
The initial purchase is a one-off payment — no subscription is created and nothing recurs automatically. Annual renewal is a separate optional purchase for Foundation, and available for Standard and Pro to keep the event management workspace live.
Renewal is never automatic. Your evidence pack remains accessible permanently regardless of renewal status.
The programme is available to organisations in the United Kingdom and Ireland. Content is derived from UK GDPR (DPA 2018 / DUAA 2025) and EU GDPR (DPA 2018 / DUAA 2025). GDPRLedger does not provide legal advice.
Prices shown are Launchpad prices — introductory pricing available during the initial launch period. Partner programme commission (20–25%) applies to referred purchases and renewals during the partner’s active agreement period.
Join the early access list and be notified when the programme opens. £129 Standard · £449 Pro · One-off payment · No subscription.
No spam. Your email is used only to notify you of programme launch.