AI-Powered · Azure Marketplace

GDPR compliance
gaps found in minutes

Upload your privacy policies, DPAs, and compliance documentation. Our AI agent runs a structured 7-step assessment grounded in all 99 GDPR articles and returns color-coded findings with verbatim evidence.

Deploy from Marketplace How it works
99
GDPR articles in
the knowledge base
7
Structured assessment
steps
3
Document formats
PDF · DOCX · TXT
0
Data retained after
session ends
Core capabilities
📄
Document Intelligence
Processes PDF, DOCX, and TXT files. Every finding is anchored to a verbatim quote from your uploaded documents — not AI paraphrase.
🔍
RAG-Powered Analysis
All findings map to actual GDPR article text retrieved from the knowledge base. No hallucinations — just regulatory accuracy grounded in real law.
🧩
7-Step Structured Wizard
Guided questionnaire aligned with GDPR Article 5 principles: Data Scope, Classification, Purpose, Roles, Lawfulness, Risk, and TOMs.
🔒
Zero Data Persistence
Session-only architecture. Documents and assessment answers are automatically purged after a 1-hour TTL. Nothing is written to a database.
🏢
Entra ID Authentication
Enterprise-grade authentication via Microsoft Entra ID with RS256 JWT validation. Deployed into your own Azure subscription.
⚡
Azure AI Foundry
Powered by GPT-5.2 via Azure AI Foundry. All AI compute stays within your tenant — no data leaves your environment.
How it works
01 —
Sign in with Microsoft
Authenticate using your existing Microsoft account via Azure Active Directory. No new accounts or passwords. Access is controlled by your organisation's Entra ID tenant.
02 —
Upload compliance documents
Upload privacy policies, Data Processing Agreements, Records of Processing Activities, Technical & Organisational Measures documentation, or any GDPR-relevant materials in PDF, DOCX, or TXT format.
03 —
Complete the 7-step wizard
Answer a structured questionnaire covering: Data Scope, Data Classification, Processing Purpose, Controller/Processor Roles, Lawful Basis, Risk Assessment, and Technical & Organisational Measures — aligned with GDPR Article 5.
04 —
Receive your assessment report
The AI agent analyses your answers against the GDPR knowledge base and returns a structured report with color-coded findings, specific article references, and verbatim quotes from your documents as supporting evidence.
05 —
Act on the findings
Share the report with your DPO or compliance team. Green findings confirm adequate controls. Yellow flags require DPO validation. Red findings indicate critical gaps mandating immediate remediation before go-live.
Finding severity levels
Green No significant issues identified. Documented controls appear adequate for the assessed processing activity. No immediate action required, though periodic review is recommended.
Yellow Gaps or ambiguities identified that require DPO validation before the processing activity goes live. Documentation may be incomplete or controls partially implemented.
Red Critical compliance issues identified. DPO involvement is mandatory. Processing should not proceed until the identified gaps are remediated and re-assessed.
Architecture overview
deployment-topology.txt
Frontend
React 19 TypeScript Vite 5 MSAL React Tailwind CSS Azure App Service (nginx)
Backend
Python 3.12 FastAPI Pydantic v2 Azure App Service RS256 JWT
AI Layer
Azure AI Foundry GPT-5.2 RAG (99 articles) ChromaDB text-embedding-3-small
Platform
Entra ID Azure Key Vault Azure Blob Storage Azure Files Bicep IaC
Technical foundation
Backend
Python 3.12 · FastAPI · Pydantic v2 · Azure SDK
Frontend
React 19 · TypeScript · Vite 5 · Tailwind CSS
Authentication
Microsoft Entra ID · MSAL · RS256 JWT validation
AI
Azure AI Foundry · GPT-5.2 · RAG knowledge base
Storage
Azure Blob Storage · 1-hour TTL · auto-purge
Infrastructure
Azure App Service · Key Vault · Bicep IaC · Managed App
Get started
Deploy to your Azure subscription
Available as an Azure Managed Application from the Service Catalog.
Deploys into your tenant — your data never leaves your environment.
Deploy from Marketplace
Before deploying — you will need
①
Entra App Registration
Create a new app registration in your tenant. Note the Application (client) ID and Directory (tenant) ID.
②
Azure subscription
Contributor or Owner role on the target subscription or resource group where the managed app will be deployed.
③
AI Foundry (optional)
If you have an existing Azure AI Foundry instance, you can connect it during deployment. Otherwise a new one is provisioned automatically.
After deploying — first-time setup
1
Open the deployment outputs and copy the Frontend URL
In the Azure portal, go to the managed application → Overview → Outputs. Copy the value of frontendUrl — it looks like https://app-<name>-frontend-dev.azurewebsites.net.
2
Add the Frontend URL as a Single-page Application redirect URI
In the Azure portal, open Microsoft Entra ID → App registrations → your app → Authentication.
Under Single-page application, click Add URI and paste the frontendUrl value.
Make sure to add it under Single-page application, not "Web". MSAL uses the auth code + PKCE flow which requires SPA redirect URIs.
Click Save.
3
Grant the managed identity access to your existing AI Foundry
Only if using existing Foundry
If you connected an existing Azure AI Foundry account during deployment, the managed identity needs permission to call the AI models. The deployment does not automatically set this up on resources outside the managed resource group.
Steps in Azure portal
a. Open your Azure AI Services resource → Access control (IAM) → Add role assignment.
b. Assign all three roles to the managed identity (mi-<appname>-<env>) found in the managed resource group: Cognitive Services OpenAI Contributor Cognitive Services User Azure AI Developer
c. RBAC propagation can take up to 5 minutes. Restart the backend App Service afterwards.
4
Open the Frontend URL and sign in
Navigate to the frontendUrl in your browser. Sign in with your Microsoft Entra account. If you see a redirect error, double-check that the URL is registered as a Single-page application redirect URI in step 2.