Log inSubmit a tool
> templates

Paperwork, already half done

Pick a template and the tools on your shortlist. Everything we know from their trust cards is filled in; you only answer what’s left. Free.

> template
> tools
> for_msps

Hand it to clients as your own supplier review. Free for MSPs.

> trusthunt/ prepared 14 Oct 2026

DPIA starter: Metomic

from trust card 1 answers · you answer 8 left

  1. What personal data does the tool process, and where?
    from trust card · maker says Content is inspected in flight; only findings and metadata are kept, for the audit trail.
  2. Where does processing happen?
    you answer
  3. Who else receives the data (sub-processors)?
    you answer
  4. How long is it kept?
    you answer
  5. The supplier’s role under UK GDPR
    you answer
  6. Why do you need this processing?
    you answer
  7. Who are the data subjects?
    you answer
  8. Main risks, and what reduces them
    you answer
  9. Residual risk after controls
    you answer

Answers marked “from trust card” come from TrustHunt; “✓ checked” means TrustHunt verified them. Trust cards change: check the live card before you rely on this copy.

Print or save as PDF Download for Word It stays linked to the live cards: watch the tools to hear when an answer changes.