High-risk gap
Do not send from memory. Build the vendor facts, customer segment, timing, and proof record first.
Score your subprocessor notice workflow before the vendor goes live.
Use this browser-only self-audit to find missing facts, dates, customer segments, and proof records before you send a customer notice or ask counsel to review it.
What the score means
A high score does not decide whether a notice is legally required. It shows whether the operational packet is organized enough for a clean send and review.
Needs cleanup
The workflow is close, but missing fields can create deadline confusion or weak evidence later.
Review-ready
The operational record is ready for final attorney, DPO, or accountable operator review before sending.
Shareable worksheet
Take the self-audit to counsel or your DPO.
Download the Markdown worksheet to capture the same 10-point score, priority fixes, affected customer segments, and evidence plan in your own workspace.
Missing more than two items?
The Pro kit covers segmentation, evidence logs, DPA intake fields, and repeated vendor-change records. The Concierge Audit is for teams with an urgent change or enterprise review.