All your Law 21.719 compliance, in one place.
From diagnostic to evidence organized for an inspection. A structured questionnaire detects your gaps, gives you the plan to close them and helps you prepare key documents such as the RAT (record of processing activities) and your privacy policy.
Designed for mid-sized companies and SMEs. If your organization is regulated and needs to manage several frameworks, discover the AlerceGRC platform.
Know your current situation precisely.
118 questions across 6 areas —Technical, Operations, Commercial, HR, Governance and Digital Sources— translate the law into questions your team can actually answer.
- Overall and per-section score, with a risk traffic light
- Industry context: health, retail, fintech, BPO, education
- Score history to track your progress over time
A prioritized plan, not a list of reproaches.
Each gap is ranked by impact × effort in quadrants —quick wins, strategic, fill-ins— with step-by-step instructions and the article of the law that backs it.
- Actions with a concrete "how to", not generalities
- Task assignment by owner and area
- Technical plan with a 26-week Gantt schedule
The evidence the Personal Data Protection Agency can ask you for, organized and at hand.
Generate your documents pre-filled from your own assessment, and store each supporting file with a SHA-256 seal that lets you verify it was not altered.
- RAT (record of processing activities), DPA (data processing agreement with your vendors), Privacy Policy and Cookie Notice
- Exportable inspection pack with index and hashes
- Embeddable compliance badge: Gold, Silver or Bronze. It reflects your score on the platform; it is not a certification.
The badge stays valid as long as you keep your score and your evidence up to date. Every 90 days we revalidate your level: if you keep complying, it is extended; if your score drops, we warn you in time to recover it.
Complying is not an event. It's an operation.
ARCOP portal
Receive and manage requests from your data subjects —access, rectification, erasure, objection and portability (ARCOP)— with deadline tracking.
Breach management
Log security breaches and document how they were handled. The law requires reporting them to the Personal Data Protection Agency by the most expeditious means possible and without undue delay and, in certain cases, notifying data subjects.
Industry percentile
Benchmark yourself against your sector and show your board where you stand.
Start free. Scale when you need to.
Free diagnostic in 15 minutes, and a 7-day trial of the full assessment with no card.