Paperwork, already half done

DPIA starter: Lakera Guard (Check Point)

from trust card 2 answers · you answer 7 left

1. What personal data does the tool process, and where?
   you answer
2. Where does processing happen?
   from trust card · maker says Cloud API: the nearest region by default (EU, US or Singapore); you can pin a regional endpoint and restrict which regions process requests. Self-hosted: your own infrastructure.
3. Who else receives the data (sub-processors)?
   you answer
4. How long is it kept?
   from trust card · maker says By default the cloud service logs all prompts and model outputs for its dashboard; admins can switch prompt logging off. Detected personal data is masked before logging.
5. The supplier’s role under UK GDPR
   you answer
6. Why do you need this processing?
   you answer
7. Who are the data subjects?
   you answer
8. Main risks, and what reduces them
   you answer
9. Residual risk after controls
   you answer