The tour follows a practical operating sequence. Each step connects the responsible team, the required record, the action to be completed, and the evidence retained.
Begin with the organisation's real data environment.
Record business areas, systems, databases, files, processors, data categories, responsible owners, and processing activities. Use discovery workflows to identify information that requires review and classification.
Document why personal data is processed and how that processing is governed.
Connect each purpose with the relevant personal data, applicable processing ground, responsible function, processors, retention requirement, and current status.
Prepare clear notices and consent experiences for the relevant service or processing activity.
Record the notice version shown to the Data Principal, the consent decision, the time of the decision, and any later withdrawal. Make the withdrawal process accessible through the configured channel.
Give Data Principals a clear service channel and give internal teams a controlled work process.
Verify the request, assign responsibility, coordinate the response, communicate status, record the outcome, and preserve the closure evidence.
Convert an approved decision into accountable operational work.
Create actions for configured systems, monitor execution, manage exceptions, retry failed work, and retain the verification information available from each system.
Bring together the records needed for breach response, governance review, management oversight, and audit preparation.
Document incident facts, affected individuals, communications, remediation, processor oversight, impact assessments, processing records, and approved evidence packages.
The demonstration environment allows evaluators to review how the workflows, records, permissions, and operating screens are organised.