New vendor. 15-page privacy policy. Legal review takes 2 weeks. We need to sign this week.
Built GDPR scanner. Policy scored 42%. Three gaps flagged. Remediation requested before signing.
THE COMPLIANCE REVIEW BOTTLENECK:
Every vendor needs privacy review. Legal team backlogged. Policies written in legalese. Required elements buried in paragraphs.
Signed contract. Discovered GDPR gap. Six months of remediation.
THE DISCOVERY:
Document extraction checks all GDPR requirements. Code calculates compliance score. Gaps identified automatically.
Systematic verification. Same checklist every time. Nothing missed.
THE WORKFLOW:
Google Drive trigger watches policies folder → Download document → Document extraction checks data controller, DPO contact, user rights, legal bases, international transfers → Code calculates compliance score and identifies gaps → Sheets logs scan results → IF checks if not compliant → Alert Slack with specific gaps.
7 nodes. Vendor compliance automated.
THE COMPLIANCE SCORING:
Code checks 6 required user rights: Access, Rectification, Erasure, Portability, Objection, Withdraw Consent.
Score starts at 100%. Deducts 10% per gap:
- Missing DPO contact
- No legal basis
- No breach notification
- International transfers without safeguards
- Missing user rights
THE STATUS THRESHOLDS:
- 80% and above: Compliant
- 50-79%: Needs Attention
- Under 50%: Non-Compliant
Conditional alert only for non-compliant policies. Specific gaps listed.
THE TRANSFORMATION:
Before: 2-4 hours per policy for manual review. Gaps discovered after contract signed. Inconsistent checking.
After: 45 seconds with compliance score. Issues flagged before relationship begins.
THE NUMBERS:
23 policies scanned last month
8 non-compliant policies caught
14 missing user rights identified
2 hours → 45 seconds per review
What GDPR gap is hiding in your vendor contracts?