🛡️ Pentest from €539 · Compliance from €89. See All Services →
Optimum Web
GDPRCR-GDPR-03

Data Mapping & Personal Data Inventory

Complete personal data inventory across all your IT systems. Data Map format meets Article 30 requirements. Covers CRM, databases, backups, logs, cloud, SaaS.

Data Mapping & Personal Data Inventory by Optimum Web is a fixed-price compliance service covering GDPR Article 30 — Records of Processing Activities. It costs €359 with 5–7 business days delivery by senior security engineers. Audit of all systems containing personal data. 14-day warranty included.

€359
Fixed price, VAT excluded
5–7 business daysSenior only
Audit of all systems containing personal data
Data flow diagram — where data goes and how
Access mapping — who has access to what
Article 30 compliant Records of Processing Activities document
🛡️
14-Day Warranty
If the delivered pack does not match your ISMS scope and Statement of Applicability, we rework it at no cost, or refund in full within 14 days of delivery.

Secured by PayPal · 256-bit SSL encryption

or order without payment
+373 22 843569
PayPal · SSL
👨‍💻 Senior only
14-day warranty
🆔 CR-GDPR-03

This Service Covers

GDPRArticle 30 — Records of Processing Activities

What You Get

Complete inventory of where personal data lives in your IT systems. We audit every system: CRM, databases, email servers, backups, logs, analytics, cloud storage, SaaS services. For each source we document: data type, volume, legal basis for processing, who has access, how data is transferred, and where. Result: Data Map in the format required by GDPR Article 30 Records of Processing Activities.

Who Needs This

  • Companies that don't know all the places personal data is stored
  • Businesses needing GDPR Article 30 compliance documentation
  • Organizations with 10+ SaaS tools and complex data flows
  • Companies planning ISO 27001 certification (asset inventory requirement)

How It Works

  1. 1
    System List

    Compile a list of all IT systems, SaaS, and storage locations

  2. 2
    Discovery Audit

    Check each system for personal data types, volumes, and access

  3. 3
    Data Flow Mapping

    Document how data flows between systems and where it is transferred

  4. 4
    ROPA Delivery

    Article 30 Records of Processing Activities delivered in 3–5 days

ONGOING COMPLIANCE

Don't Want to Think About Compliance Every Quarter?

Compliance-as-a-Service: €729/month. Quarterly reviews, scans, documentation, and security questionnaire support — as an extension of your team, not a replacement for your compliance owner.

Start CaaS — €729/month

Ready to Start?

€359 · 5–7 business days · 14-day warranty

+373 22 843569

Secured by PayPal · 256-bit SSL encryption

or order without payment

Want ongoing compliance? Compliance-as-a-Service — €729/month

Learn more
Read verified client reviews on Clutch →

Frequently Asked Questions

How many systems can you audit in 3-5 days?+
Typically 10-20 systems. For companies with 50+ systems, we may need an additional 2-3 days. We prioritize by data volume and sensitivity.
Do you check SaaS services like Mailchimp, HubSpot, Slack?+
Yes. SaaS services often hold personal data that companies forget about. We check each SaaS subscription for data types stored, DPA (Data Processing Agreement) status, and data transfer mechanisms.
What if we don't know all the systems that hold personal data?+
That's exactly why this service exists. We discover systems you didn't know held personal data. Common surprises: old test databases, analytics tools, shared Google Drives, retired SaaS accounts still holding data.
Is this a one-time exercise or ongoing?+
The initial mapping is one-time. We recommend updating it annually or when new systems are added. Our Quarterly Compliance Review (CR-GDPR-16, €229/quarter) includes data map updates.
Can the data map be used for ISO 27001 as well?+
Yes. The asset inventory component maps directly to ISO 27001 Annex A 5.9-5.13. If you pursue ISO later, this data map saves significant work on the asset classification requirement.

Service page last reviewed 15 August 2026 by the Optimum Web compliance team.

Also Relevant

GDPR

GDPR Technical Compliance Audit

€449 · 5–7 business days
GDPR

Data Retention Policy Document

€319 · 5–7 business days
ISO 27001

Asset Inventory & Classification

€319 · 5–7 business days
+373 22 843569

Secured by PayPal · 256-bit SSL encryption

or order without payment
📞Call Us💬Get Free Quote