All the answers, in one place

Data Comply One (formerly Mission RGPD) is an all-in-one SaaS cyber-compliance platform. It brings together GDPR software, e-learning modules, an outsourced DPO and CISO service, and the steering of GDPR, AI Act, NIS 2 and DORA regulations. More than 1,000 companies and organisations now steer their compliance with us.

Our offering is designed for SMEs, mid-cap companies, international groups, public bodies and associations. It is modular and adapts to every organisation size thanks to 3 levels of support (autonomous Solo, Coach-supported, outsourced DPO / CISO). See the Pricing page for details.

We combine in a single tool the steering software, designated DPO / CISO experts (registered with the supervisory authority), an e-learning Academy and 4 regulations (GDPR, AI Act, NIS 2, DORA). The platform is hosted in France, subject to European law, and complies with the sovereignty principles described in our Trust Center.

Yes. Data Comply One is the new brand of Mission RGPD. The scope, teams and commitments remain unchanged; the offer has expanded to include new regulations (AI Act, NIS 2, DORA, Data Act). See the "Our story" page for the full journey.

By phone at +33 4 28 70 91 81, by email at contact@datacomplyone.com, or by booking an online appointment with an expert from the Demo page. You can also follow our news via our monthly LinkedIn newsletter.

The platform brings together 4 steering modules (GDPR, AI Act, NIS 2, DORA) and complementary modules (Data Act coming soon). Each one automates the corresponding regulatory obligations: records, impact assessments, rights management, incident declarations, etc.

Log in at login.datacomplyone.app with your username and password. You can also go through www.datacomplyone.com and click "Log in". A complete tutorial is available in the Help Centre.

Click "Forgot password" on the login page. Be careful: after 3 failed attempts the account is automatically locked for security reasons; you must then contact support to unlock it.

The number of users is unlimited in every plan. 7 predefined roles are available (ADMIN, DPO, Contributor, Reader, etc.). Users can be internal (employees) or external (subprocessors, consultants).

Yes, the entire platform is responsive and usable on smartphone / tablet via the browser. No installation required.

Yes. Integrations and APIs are available to feed the platform from your IS (HR processing, subprocessors, software) and to expose certain data (rights requests, incidents) to your existing tools (Jira, ServiceNow, HRIS, GLPI).

Yes. You can import your existing register in Excel / CSV format. Our Customer Success team can also handle the import for you as part of the Coach or Outsourced DPO plans.

Yes, as soon as your company processes personal data (clients, employees, prospects, suppliers) of European residents, whatever its size or sector. Almost every company is concerned.

Maintain a record of processing activities (Art. 30), carry out impact assessments (DPIA) when needed, manage data subjects rights requests, notify breaches to the supervisory authority within 72h, frame your subprocessors with a DPA and raise awareness with your staff.

The DPO (Data Protection Officer) is the GDPR contact person for the organisation. It is mandatory for public bodies, for organisations whose core activity involves large-scale regular monitoring, or large-scale processing of sensitive data. Strongly recommended otherwise.

The controller decides on the purposes and means of the processing (usually the company that collects the data). The processor processes data on behalf of the controller (SaaS, host, provider). Their relationship is governed by a DPA (Art. 28 GDPR).

Up to €20 million or 4% of global annual turnover — whichever is higher. The supervisory authority can also issue warnings, formal notices or injunctions with daily fines.

No. A DPIA is mandatory only for processing likely to result in a high risk (large-scale sensitive data, systematic monitoring, profiling, etc.). The platform automatically guides you to the relevant processing activities.

There is currently no official GDPR certification. The "GDPR Committed" label by Data Comply One attests a GDPR score assessed by our experts based on objective criteria. It can be shared with your partners via a downloadable GDPR Pass.

3 levels of support: SOLO (you operate autonomously with full platform access), COACH (a dedicated DPO Coach guides you on your priority projects) and OUTSOURCED DPO / CISO (a designated expert manages your compliance end-to-end). Pricing details on the Pricing page.

Depending on the plan: monthly or annual. All our plans include a minimum 12-month commitment. The annual option offers a discount over monthly billing.

Yes. A 15-day free trial gives you access to the full feature set, no credit card or commitment required. You can also request a personalised demo with an expert.

Yes. Outsourced DPO and CISO offerings are tailor-made based on your organisation, sector and maturity level. Contact us via the Demo page to receive a personalised quote.

Yes. We offer Group pricing: a master subscription at headquarters level and sub-accounts for each subsidiary, with consolidated 360° visibility and preferential rates from several entities onwards.

Oui. Vous pouvez changer de formule à tout moment : le passage de SOLO à COACH ou DPO / RSSI externalisé se fait sans perte de données, votre espace et votre historique de conformité sont conservés. Le changement prend effet sur la période de facturation suivante ; contactez votre interlocuteur ou le support pour le déclencher.

La conformité au RGPD implique de gérer simultanément le registre des traitements, les demandes d'exercice de droits, le suivi des violations de données, les mentions légales et le pilotage des sous-traitants. Réalisées manuellement (fichiers Excel, mails, documents dispersés), ces tâches sont chronophages et difficiles à prouver en cas de contrôle. Un logiciel dédié centralise ces obligations dans une interface unique, trace les preuves et transforme la conformité en processus maîtrisé et durable.

Oui. Les formules COACH et DPO / RSSI externalisé donnent accès à un expert attitré : il vous accompagne sur vos projets prioritaires, valide vos analyses, répond à vos questions et peut être désigné DPO auprès de la CNIL. Vous gardez l'accès complet à la plateforme en parallèle.

Oui. Le diagnostic RGPD est mené par nos experts et vous donne un état des lieux clair et personnalisé : il identifie les écarts entre vos pratiques actuelles et les exigences du règlement (gestion des données, contrats sous-traitants, sécurité, information des personnes) et se conclut par un plan d'action priorisé. C'est le point de départ habituel d'une démarche de conformité, quelle que soit la taille de la structure.

La formule DPO externalisé est recommandée lorsque la désignation d'un Délégué à la Protection des Données auprès de la CNIL est obligatoire (organisme public, suivi régulier à grande échelle, traitement à grande échelle de données sensibles) ou lorsque vous ne disposez pas de la ressource interne. Dans les autres cas, la plateforme seule (formule SOLO) ou accompagnée (COACH) suffit à piloter votre conformité.

A DPO registered with the supervisory authority is appointed on your behalf (official declaration). They steer your compliance via the platform: records, impact assessments, rights management, breach notifications, awareness, executive reporting and representation in case of audit. Regular video meetings are scheduled.

A senior CISO drives your cybersecurity from the platform: asset mapping, risk analysis, continuity plan, incident management, awareness, NIS 2 / DORA reporting and ISO 27001 support where relevant.

Yes. We offer an interview with several experts so you can pick the one who best fits your sector, company culture and language. A replacement is possible at no extra cost in case of later disagreement.

Yes. Our outsourced DPOs officially represent you before the supervisory authority. They prepare your file, support the exchanges, draft responses and defend your interests throughout the procedure.

It is our integrated training platform. It offers short modules (5-15 min) on GDPR, cybersecurity, AI Act and more. Employees receive a certificate after passing the quizzes; tracking is real-time from the dashboard.

Yes, complementary to e-learning modules: GDPR fundamentals, cybersecurity, AI & GDPR, AI Act, NIS 2. On-site or live remote (Zoom / Teams). Quote on request.

The NIS 2 directive applies to essential and important entities in 18 sectors (energy, transport, healthcare, digital, finance, water, manufacturing, etc.). Any company with more than 50 employees or €10M turnover in these sectors is potentially in scope. Our online self-diagnostic helps you verify eligibility.

DORA (Digital Operational Resilience Act) imposes on financial entities a framework for digital operational resilience. In scope: banks, insurers, asset managers, payment service providers and critical ICT providers to the financial sector. Effective since January 2025.

The Data Act (Regulation 2023/2854) regulates access and sharing of data generated by connected devices (IoT). It requires manufacturers to make such data available to the user and authorised third parties.

The nFADP (new Federal Act on Data Protection) entered into force in September 2023. It is largely aligned with GDPR with a few specifics (mandatory designation of a representative in Switzerland for foreign companies processing data of Swiss residents).

The CRA applies to manufacturers, importers and distributors of digital products (hardware and software) sold in the EU. It imposes cybersecurity by design, vulnerability management and CE marking.

Often yes. A financial-sector organisation must, for example, steer GDPR + DORA + NIS 2 + AI Act simultaneously. Data Comply One lets you pilot all these regulations from a single platform, with shared controls.

No, they are voluntary standards. But ISO 27001 is increasingly expected in tenders and is becoming a de facto prerequisite for enterprise accounts. ISO 42001 is the new reference standard for AI systems, complementary to the AI Act.

The AI Act (Regulation 2024/1689) is the first global legal framework for artificial intelligence. It classifies AI systems by risk level (unacceptable, high, limited, minimal) and imposes proportionate obligations. Phased entry into application between 2025 and 2027.

Never enter personal or confidential data into the free version. Always verify outputs (hallucinations possible). Document uses in your record of processing activities. Prefer enterprise versions with no-training commitments, and train your teams.

High-risk AI is defined by the AI Act for sensitive domains: biometrics, critical infrastructure, education, employment, access to essential services, justice, immigration, law enforcement. Our AI Act module automatically classifies your systems.

Up to €35M or 7% of global turnover for the most serious infringements (prohibited AI), €15M or 3% for high-risk requirement breaches, €7.5M or 1% for incorrect information disclosure.

We offer a complete AI e-learning course (9 modules) covering AI fundamentals, the AI Act, best practices, governance and business use cases. Included in plans with Academy.

Your data is hosted 100% in France with a sovereign hosting provider on ISO 27001 and HDS certified datacenters. AES-256 encryption at rest, TLS 1.3 in transit, customer environment isolation, daily redundant backups.

The TOS and DPA (Data Processing Agreement) are downloadable directly from our Trust Center (Legal Center section). Other documents (legal notice, privacy policy, cookie policy) are accessible in the footer.

For any incident or suspicion of an incident affecting your data, contact support@datacomplyone.com immediately. Our incident response procedure is documented ISO 27035. Customer notification within 4h for major incidents, ANSSI / supervisory authority declaration if needed.

Our hosting infrastructure is ISO 27001 certified. Our own certification process is underway. Details of our security measures (governance, continuity, access control) are presented in the Trust Center.

Yes. Regular penetration tests carried out by a qualified external provider. Automated vulnerability scans. Bug Bounty programme open to security researchers. Summary available on request for our clients.

Trigger your response plan, contain the breach, assess the risk to individuals, notify the supervisory authority within 72h, inform individuals if high risk, and document in your register. The platform automates this workflow and provides compliant notification templates.