Javascript is required
logo-dastralogo-dastra

What is the general data protection regulation?

The GDPR (General Data Protection Regulation) is a European regulation that came into effect in 2018, which governs the collection and processing of personal data within the European Union. It requires organizations to implement concrete measures to ensure transparency, security, and respect for the rights of individuals, under the threat of significant financial penalties in case of non-compliance.

Why comply with the general data protection regulation?

Complying with the general data protection regulation is much more than a legal obligation, it is:

  • Strengthening trust and transparency towards clients
  • Effective protection of personal data
  • Better governance of your organization's data
  • The assertion of your position as a responsible stakeholder in the digital economy

Simplify your GDPR compliance with our Dastra governance solution

Optimize the management of personal data through automation and a clear overview. Save time, minimize risks, and strengthen your clients' trust, all with an intuitive and secure solution.

Create and maintain the record of processing activities

Comply with the obligation of Article 30 of the GDPR and benefit from a powerful management tool designed by GDPR experts for DPOs. Document processing activities using templates, questionnaires, or even AI to increase efficiency and finally keep them up to date!

Simply map your personal data processing!

Collaborate effectively with a set of pre-configured records designed to facilitate teamwork. Enrich your repositories and link them to your processing activities, data breaches, rights exercise requests, and files for comprehensive and centralized management.

Manage rights exercise requests efficiently!

From receiving requests to processing them, including secure authentication, centralize and track requests from your employees, clients, and contractors directly on the platform. Simplify management while ensuring compliance and security.

Manage personal data breaches effectively!

Record and track breaches detected internally or reported by your subcontractors, then assess their level of risk for optimal management.

Facilitated reports and audits

Easily generate compliance reports and audits with one click using our document automation solution. Save time and focus on what matters! Export your record in a multitude of formats (PDF, Excel, CSV, JSON, Word, Markdown...) in just a few clicks.

Create and maintain the record of processing activities

Main features

By role

Case study

“Dastra is a tool that has been developed by industry specialists for the industry.”

Margreet Bruinsma, DPO

Articles that may interest you

Which internet browser should I use?

The solution works from a browser connected to the Internet. An internet connection is required as well as an up-to-date and state-of-the-art browser in terms of security. We recommend using standard browsers (Mozilla Firefox, Microsoft Edge, Google Chrome, Safari, Opera...). We do not support Microsoft Internet Explorer.

I don't quite understand the GDPR, is Dastra for me?

Yes!

We develop Dastra with one main objective: pedagogy!

Dastra is a software intended for data protection professionals (DPOs) but also for the operationnals (accounting, HR, logistics, IT etc.) so, in order for everyone to collaborate and understand what is expected of them, many pieces of information are accessible at any time in the application (for example, tooltips).

A tutorial documentation is also available here.

In addition, we accompany you in getting to grips with the application in an onboarding phase.

Can Dastra integrate with my applications?

Yes, the integration of Dastra with another application is generally always possible, provided that the target application has APIs (which many standard applications on the market do).

In theory, it is possible to do it yourself using the Dastra API. Otherwise, building API connectors is the main job of integrators: you just need the human resources to create, maintain and make business decisions about the behavior of synchronizations.

At Dastra, we have partnered with recognized integrators who know Dastra well and are fully capable of handling all connection requests.

If you have a question about integrating Dastra with a particular application, please feel free to contact us.

What resources are available on the platform?

Dastra includes many resources on GDPR and privacy compliance that are freely available. Whether it's practical information on the application of the GDPR, guides from the data protection authorities, guidelines from the EDPS or even an expert watch, you'll find all the resources you need to ensure your privacy compliance.

What support does Dastra offer?

We offer several ways to help you get started with the software:

  • a ticketing tool integrated in the application (you don't need to create an account on an external platform)
  • a community forum to exchange with other Dastra users
  • a integrated chat
  • a phone number dedicated to customer support (+33 1 76 31 05 47) available from Monday to Friday from 9am to 6pm
  • email support to your Privacy Success Manager

In any case, when you first use the tool, we will assit you in a kick-off meeting (onboarding) to make sure you become autonomous on the application and to help you in your GDPR & privacy compliance!

How many languages are available in the Dastra tool?

Dastra natively includes 9 languages: French, English, German, Spanish, Dutch, Italian, Portuguese, Polish and Greek. Other languages may be implemented in the data subject rights and cookies modules.

What features are included in the trial offer?

You have access to all of Dastra's features in the trial package, except for audit and data processing activities exports.

If you want to have a view of the exports, contact us !

Is the data secure with Dastra?

We apply strict security measures to our environment, both at the application and development levels.

We maintain a technical watch and have our solution regularly audited in order to provide the maximum guarantees on the security of the data you entrust to us.

You can find out more on our page dedicated to security.

What happens when my subscription expires?

When your subscription expires and without renewing your contract, you will no longer be able to access or modify the information contained in your space. The information is deleted within a reasonable time (maximum 2 months).

Does Dastra comply with the government's General Accessibility Guidelines for French administrations (RGAA)?

Yes, in part !

We have completed a compliance audit of the General Accessibility Guidelines for the Administration (RGAA).

Our cookie choice management widget is fully compliant with the RGAA.

We have made the necessary changes to the source code to comply with accessibility standards.

Thus, the use of the widget and its appropriate configuration will maintain compliance with the standard for the site that hosts the widget.

More information about this standard: https://www.numerique.gouv.fr/publications/rgaa-accessibilite/

Can I host the files in my own environment?

Yes!

With DASTRA, you can connect yourself your own data hosting solution to host the documents stored in the application. This includes all documents stored in the document management system and documents stored in the rights management system.

You have control over the security of this hosting. The files remain under your control.

Today, we can connect Amazon S3 and Azure Blob Storage. Other services can be developed on demand, please contact us if you have a question regarding this topic.

How long does my trial offer last?

The trial offer is for a period of one (1) month. After that, you can contact us directly to extend it if you need it.

I work in a large company, is DASTRA adapted to our size?

Yes, we offer subscriptions dedicated to large structures (large and medium-sized companies) composed of several legal entities.

Dastra is particularly well suited for corporate groups, either centralized with a single location for entity management and shared repositories, or decentralized.

Please contact us if you would like to know more information on how Dastra can help your specific organization.

How quickly can the work environment be deployed?

The Dastra work environment is deployed immediately after the creation of the entity.

How do I cancel my subscription?

In order to cancel your subscription, please contact us adding any information that can help us identify your subscription (company name, etc).

Difference between an AI system and an AI model

Distinction between AI Model and AI System

Understanding the distinction between an AI model and an AI system is important for anyone interested in artificial intelligence, whether for developing new technologies or using them.

AI models are the fundamental components that perform specific tasks, while AI systems integrate these models into complete and functional solutions to address practical needs.

By recognizing these differences, one can better appreciate the complexity and scope of AI applications in various fields.

AI Model

An AI model is a central component of artificial intelligence. It is a mathematical or statistical representation of a specific problem, developed from data.

AI models are trained to recognize patterns, make predictions, or make decisions based on data.

The most common types of AI models include neural networks, decision trees, support vector machines, and regression models.

Examples of AI models include:

  • Deep neural networks: Used for tasks such as image recognition or natural language processing.
  • Decision trees: Used for classification and regression.
  • Regression models: Used to predict continuous values.
  • Linear regression: Used to predict future stock prices based on past prices and other information. Analyzes materials, machines, and time-based data to improve production processes.
  • Random forest: Helps explain cases where treatments may have unintended effects or negative outcomes.
  • Naive Bayes: Can predict real-time customer preferences based on their browsing behavior or purchase history.

The AI model is somewhat like the brain of AI. It is built and optimized through a training process, where it learns from historical data to improve its accuracy and efficiency.

AI System

An AI system is a broader and more complex application that integrates one or more AI models to accomplish a specific task.

It encompasses not only AI models but also the necessary components to collect, process, and analyze data, as well as interact with users.

In other words, an AI system is a complete solution that implements AI models within an operational framework.

Components of an AI system include:

  • AI Models: Algorithms trained to perform predictions or analysis.
  • Data Collection and Processing: Processes for gathering and preparing data for the model.
  • User Interface: Means by which users interact with the system, such as web or mobile applications.
  • Infrastructure: The hardware and software necessary to operate the system, such as servers and databases.

Example of an AI system includes:

  • Virtual Assistant: Like Siri or Alexa, which use multiple AI models for speech recognition, natural language understanding, and generating responses, while integrating databases and user interfaces to interact with users.
  • Recommendation Systems: Used by platforms like Netflix or Amazon to suggest content or products, incorporating collaborative filtering models and user data processing.

Key Differences between AI Model and AI System

  1. Scale and Complexity:

    • AI Model: is a specific component focused on a precise task such as prediction or classification.
    • AI System: is a use case that integrates multiple components, including AI models, training data, to solve a problem or provide a service.
  2. Components:

    • AI Model: Only includes the algorithm.
    • AI System: Includes infrastructure for deployment, user interfaces, data management, and AI models.
  3. Functionality:

    • AI Model: Provides an output based on data analysis.
    • AI System: Uses this output to interact with users or other systems, often in real-time.

Register of AI Systems in Dastra

List your AI use cases and identify associated risks within Dastra.

What is the EU regulation on AI?

The AI Act, or Regulation on Artificial Intelligence, is a regulation developed to regulate and encourage the development as well as the marketing of artificial intelligence systems within the European Union. Proposed by the European Commission in April 2021, the AI Act came into effect on July 12, 2024, after three years of negotiations.

What is the purpose of the AI Act?

The AI Act aims to create a harmonized legal framework in the EU to ensure that artificial intelligence systems are safe, transparent, ethical, and respect fundamental rights. More specifically, it has the following objectives:

  • Protect citizens against the use of AI deemed dangerous or intrusive (e.g., mass surveillance, behavioral manipulation)
  • Regulate high-risk systems with strict obligations for transparency, human oversight, data quality, and documentation
  • Promote trustworthy innovation by providing a clear framework for AI developers and companies
  • Enhance public and professional user trust in AI

What are the forms of risks?

The approach to AI systems is based on a risk assessment. The regulatory framework defines four categories of risk for artificial intelligence systems (AIS), with varying levels of regulation depending on the different levels of the pyramid.

  • Unacceptable risks
  • High risks
  • Limited/Moderate risks
  • Minimal or no risks

In which Dastra subscription plan can I benefit from the AI Act?

The AI Act is marketed in a dedicated or complementary module of the Privacy offerings. Depending on the number of employees in your company, the subscription amount will vary. Please consult our pricing page or contact us to learn more.

A small step for DPOs, a big step for data protection

Dastra.eu is free to try, easy to set up, and work seamlessly together.

Data processing
Subscribe to our newsletter

We'll send you occasional emails to keep you informed about our latest news and updates to our solution

* You can unsubscribe at any time using the link provided in each newsletter.