1️⃣ What Is a ROPA?
A Record of Processing Activities (ROPA) is a key GDPR requirement under Article 30.
It documents how your company processes personal data — including what data you collect, why, who you share it with, and how long you keep it.
In Euverify, you can easily build and manage your ROPA through the GDPR module.
2️⃣ Where to Start
Go to your Euverify Dashboard.
Navigate to GDPR → ROPA Builder.
Click Create New ROPA Entry.
This opens a guided form where you can describe each processing activity your company performs.
3️⃣ Complete Each Field
You’ll be asked to enter details such as:
Field | What to Enter |
Processing Activity Name | e.g., “Customer Orders”, “Email Marketing”, “Employee Records” |
Purpose of Processing | Why you collect data (e.g., deliver orders, manage accounts, send newsletters) |
Data Subjects | Who the data belongs to (customers, employees, website users) |
Data Categories | Types of data (name, email, phone, IP address, payment info) |
Recipients / Processors | Third parties you share data with (e.g., Shopify, Google Analytics, Stripe) |
International Transfers | Whether you transfer data outside the EU/UK (and what safeguards you use) |
Retention Period | How long you keep the data before deleting or anonymising it |
Security Measures | How you protect data (encryption, access control, secure storage) |
💡 Tip: Use simple, clear descriptions — your ROPA should show real processing activities, not just policy statements.
4️⃣ Save and Review
Click Save Entry once you’ve completed all sections.
You can add as many ROPA entries as needed — one for each key business process (e.g., “CRM Management”, “Marketing Campaigns”, “Order Fulfilment”).
Review your list anytime from the ROPA Dashboard.
5️⃣ Upload an Existing ROPA (Optional)
If your company already maintains a ROPA file, you can upload it instead of creating a new one:
Click Upload Existing ROPA
Supported file formats: PDF, DOCX, XLSX, CSV
The uploaded file will be securely stored and visible to your team based on their roles.
6️⃣ Keeping Your ROPA Updated
Your ROPA must reflect your current data practices.
Update it whenever you:
Add a new data processor or tool
Start new marketing or HR activities
Change retention periods or data flows
Euverify allows you to edit, duplicate, or delete ROPA entries at any time.