Question 1

What is Data Comply One?

Accepted Answer

Data Comply One (formerly Mission RGPD) is an all-in-one SaaS cyber-compliance platform. It brings together GDPR software, e-learning modules, an outsourced DPO and CISO service, and the steering of GDPR, AI Act, NIS 2 and DORA regulations. More than 1,000 companies and organisations now steer their compliance with us.

Question 2

Who is the platform for?

Accepted Answer

Our offering is designed for SMEs, mid-cap companies, international groups, public bodies and associations. It is modular and adapts to every organisation size thanks to 3 levels of support (autonomous Solo, Coach-supported, outsourced DPO / CISO). See the Pricing page for details.

Question 3

Why choose Data Comply One over another software?

Accepted Answer

We combine in a single tool the steering software, designated DPO / CISO experts (registered with the supervisory authority), an e-learning Academy and 4 regulations (GDPR, AI Act, NIS 2, DORA). The platform is hosted in France, subject to European law, and complies with the sovereignty principles described in our Trust Center.

Question 4

Is Data Comply One the same site as Mission RGPD?

Accepted Answer

Yes. Data Comply One is the new brand of Mission RGPD. The scope, teams and commitments remain unchanged; the offer has expanded to include new regulations (AI Act, NIS 2, DORA, Data Act). See the "Our story" page for the full journey.

Question 5

How to contact Data Comply One?

Accepted Answer

By phone at +33 4 28 70 91 81, by email at contact@datacomplyone.com, or by booking an online appointment with an expert from the Demo page. You can also follow our news via our monthly LinkedIn newsletter.

Question 6

Which modules are available on the platform?

Accepted Answer

The platform brings together 4 steering modules (GDPR, AI Act, NIS 2, DORA) and complementary modules (Data Act coming soon). Each one automates the corresponding regulatory obligations: records, impact assessments, rights management, incident declarations, etc.

Question 7

How do I access Data Comply One?

Accepted Answer

Log in at login.datacomplyone.app with your username and password. You can also go through www.datacomplyone.com and click "Log in". A complete tutorial is available in the Help Centre.

Question 8

What if I forget my password?

Accepted Answer

Click "Forgot password" on the login page. Be careful: after 3 failed attempts the account is automatically locked for security reasons; you must then contact support to unlock it.

Question 9

How many users can I create?

Accepted Answer

The number of users is unlimited in every plan. 7 predefined roles are available (ADMIN, DPO, Contributor, Reader, etc.). Users can be internal (employees) or external (subprocessors, consultants).

Question 10

Is the platform accessible on mobile?

Accepted Answer

Yes, the entire platform is responsive and usable on smartphone / tablet via the browser. No installation required.

Question 11

Can Data Comply One integrate with our tools (Microsoft 365, Google, Salesforce)?

Accepted Answer

Yes. Integrations and APIs are available to feed the platform from your IS (HR processing, subprocessors, software) and to expose certain data (rights requests, incidents) to your existing tools (Jira, ServiceNow, HRIS, GLPI).

Question 12

Can I import an existing register?

Accepted Answer

Yes. You can import your existing register in Excel / CSV format. Our Customer Success team can also handle the import for you as part of the Coach or Outsourced DPO plans.

Question 13

Is my company concerned by GDPR?

Accepted Answer

Yes, as soon as your company processes personal data (clients, employees, prospects, suppliers) of European residents, whatever its size or sector. Almost every company is concerned.

Question 14

What are my main GDPR obligations?

Accepted Answer

Maintain a record of processing activities (Art. 30), carry out impact assessments (DPIA) when needed, manage data subjects rights requests, notify breaches to the supervisory authority within 72h, frame your subprocessors with a DPA and raise awareness with your staff.

Question 15

What is a DPO? Is it mandatory?

Accepted Answer

The DPO (Data Protection Officer) is the GDPR contact person for the organisation. It is mandatory for public bodies, for organisations whose core activity involves large-scale regular monitoring, or large-scale processing of sensitive data. Strongly recommended otherwise.

Question 16

What is the difference between controller and processor?

Accepted Answer

The controller decides on the purposes and means of the processing (usually the company that collects the data). The processor processes data on behalf of the controller (SaaS, host, provider). Their relationship is governed by a DPA (Art. 28 GDPR).

Question 17

What are the penalties for GDPR non-compliance?

Accepted Answer

Up to €20 million or 4% of global annual turnover — whichever is higher. The supervisory authority can also issue warnings, formal notices or injunctions with daily fines.

Question 18

Do I need a DPIA for every processing activity?

Accepted Answer

No. A DPIA is mandatory only for processing likely to result in a high risk (large-scale sensitive data, systematic monitoring, profiling, etc.). The platform automatically guides you to the relevant processing activities.

Question 19

What is the "GDPR Committed" label?

Accepted Answer

There is currently no official GDPR certification. The "GDPR Committed" label by Data Comply One attests a GDPR score assessed by our experts based on objective criteria. It can be shared with your partners via a downloadable GDPR Pass.

Question 20

Which plans are available?

Accepted Answer

3 levels of support: SOLO (you operate autonomously with full platform access), COACH (a dedicated DPO Coach guides you on your priority projects) and OUTSOURCED DPO / CISO (a designated expert manages your compliance end-to-end). Pricing details on the Pricing page.

Question 21

Is billing monthly or annual?

Accepted Answer

Depending on the plan: monthly or annual. All our plans include a minimum 12-month commitment. The annual option offers a discount over monthly billing.

Question 22

Do you offer a free trial?

Accepted Answer

Yes. A 15-day free trial gives you access to the full feature set, no credit card or commitment required. You can also request a personalised demo with an expert.

Question 23

Do you offer a quote for outsourced DPO or CISO?

Accepted Answer

Yes. Outsourced DPO and CISO offerings are tailor-made based on your organisation, sector and maturity level. Contact us via the Demo page to receive a personalised quote.

Question 24

Can you bill several entities of the same group?

Accepted Answer

Yes. We offer Group pricing: a master subscription at headquarters level and sub-accounts for each subsidiary, with consolidated 360° visibility and preferential rates from several entities onwards.

Question 25

How does the outsourced DPO work?

Accepted Answer

A DPO registered with the supervisory authority is appointed on your behalf (official declaration). They steer your compliance via the platform: records, impact assessments, rights management, breach notifications, awareness, executive reporting and representation in case of audit. Regular video meetings are scheduled.

Question 26

How does the outsourced CISO work?

Accepted Answer

A senior CISO drives your cybersecurity from the platform: asset mapping, risk analysis, continuity plan, incident management, awareness, NIS 2 / DORA reporting and ISO 27001 support where relevant.

Question 27

Can I choose my DPO or CISO?

Accepted Answer

Yes. We offer an interview with several experts so you can pick the one who best fits your sector, company culture and language. A replacement is possible at no extra cost in case of later disagreement.

Question 28

Do you assist during a supervisory authority audit?

Accepted Answer

Yes. Our outsourced DPOs officially represent you before the supervisory authority. They prepare your file, support the exchanges, draft responses and defend your interests throughout the procedure.

Question 29

What is the DCO Academy?

Accepted Answer

It is our integrated training platform. It offers short modules (5-15 min) on GDPR, cybersecurity, AI Act and more. Employees receive a certificate after passing the quizzes; tracking is real-time from the dashboard.

Question 30

Do you offer in-person training?

Accepted Answer

Yes, complementary to e-learning modules: GDPR fundamentals, cybersecurity, AI & GDPR, AI Act, NIS 2. On-site or live remote (Zoom / Teams). Quote on request.

Question 31

Is my company concerned by NIS 2?

Accepted Answer

The NIS 2 directive applies to essential and important entities in 18 sectors (energy, transport, healthcare, digital, finance, water, manufacturing, etc.). Any company with more than 50 employees or €10M turnover in these sectors is potentially in scope. Our online self-diagnostic helps you verify eligibility.

Question 32

What is DORA?

Accepted Answer

DORA (Digital Operational Resilience Act) imposes on financial entities a framework for digital operational resilience. In scope: banks, insurers, asset managers, payment service providers and critical ICT providers to the financial sector. Effective since January 2025.

Question 33

What is the Data Act?

Accepted Answer

The Data Act (Regulation 2023/2854) regulates access and sharing of data generated by connected devices (IoT). It requires manufacturers to make such data available to the user and authorised third parties.

Question 34

What is the Swiss nFADP?

Accepted Answer

The nFADP (new Federal Act on Data Protection) entered into force in September 2023. It is largely aligned with GDPR with a few specifics (mandatory designation of a representative in Switzerland for foreign companies processing data of Swiss residents).

Question 35

Does the CRA (Cyber Resilience Act) apply to me?

Accepted Answer

The CRA applies to manufacturers, importers and distributors of digital products (hardware and software) sold in the EU. It imposes cybersecurity by design, vulnerability management and CE marking.

Question 36

Do I have to track several regulations in parallel?

Accepted Answer

Often yes. A financial-sector organisation must, for example, steer GDPR + DORA + NIS 2 + AI Act simultaneously. Data Comply One lets you pilot all these regulations from a single platform, with shared controls.

Question 37

Are ISO 27001 / 42001 standards mandatory?

Accepted Answer

No, they are voluntary standards. But ISO 27001 is increasingly expected in tenders and is becoming a de facto prerequisite for enterprise accounts. ISO 42001 is the new reference standard for AI systems, complementary to the AI Act.

Question 38

What is the AI Act?

Accepted Answer

The AI Act (Regulation 2024/1689) is the first global legal framework for artificial intelligence. It classifies AI systems by risk level (unacceptable, high, limited, minimal) and imposes proportionate obligations. Phased entry into application between 2025 and 2027.

Question 39

How to use ChatGPT in compliance with GDPR?

Accepted Answer

Never enter personal or confidential data into the free version. Always verify outputs (hallucinations possible). Document uses in your record of processing activities. Prefer enterprise versions with no-training commitments, and train your teams.

Question 40

Is my AI considered "high-risk"?

Accepted Answer

High-risk AI is defined by the AI Act for sensitive domains: biometrics, critical infrastructure, education, employment, access to essential services, justice, immigration, law enforcement. Our AI Act module automatically classifies your systems.

Question 41

What are the penalties for AI Act non-compliance?

Accepted Answer

Up to €35M or 7% of global turnover for the most serious infringements (prohibited AI), €15M or 3% for high-risk requirement breaches, €7.5M or 1% for incorrect information disclosure.

Question 42

How to get trained on the AI Act?

Accepted Answer

We offer a complete AI e-learning course (9 modules) covering AI fundamentals, the AI Act, best practices, governance and business use cases. Included in plans with Academy.

Question 43

Where is my data hosted?

Accepted Answer

Your data is hosted 100% in France with a sovereign hosting provider on ISO 27001 and HDS certified datacenters. AES-256 encryption at rest, TLS 1.3 in transit, customer environment isolation, daily redundant backups.

Question 44

Which legal documents are available?

Accepted Answer

The TOS and DPA (Data Processing Agreement) are downloadable directly from our Trust Center (Legal Center section). Other documents (legal notice, privacy policy, cookie policy) are accessible in the footer.

Question 45

How to report a security incident?

Accepted Answer

For any incident or suspicion of an incident affecting your data, contact support@datacomplyone.com immediately. Our incident response procedure is documented ISO 27035. Customer notification within 4h for major incidents, ANSSI / supervisory authority declaration if needed.

Question 46

Is Data Comply One ISO 27001 certified?

Accepted Answer

Our hosting infrastructure is ISO 27001 certified. Our own certification process is underway. Details of our security measures (governance, continuity, access control) are presented in the Trust Center.

Question 47

Do you perform penetration tests?

Accepted Answer

Yes. Regular penetration tests carried out by a qualified external provider. Automated vulnerability scans. Bug Bounty programme open to security researchers. Summary available on request for our clients.

Question 48

What to do in case of a personal data breach?

Accepted Answer

Trigger your response plan, contain the breach, assess the risk to individuals, notify the supervisory authority within 72h, inform individuals if high risk, and document in your register. The platform automates this workflow and provides compliant notification templates.

All the answers, in one place

Help centre

Glossary

Talk to an expert

Stay informed