Route 03 / data
Law No. 27 of 2022 is the legal starting point. The engineering work is a factual processing map and approved control implementation—not a generic compliance badge.
Record data subjects, controllers and processors as approved by advisers, categories, sources, purposes, access roles, systems, vendors, locations, transfers, retention, backups, deletion, and AI use.
Implement approved notices and permissions, access/correction/deletion or other request handling, authentication, logging, security, breach escalation, and a responsible human contact.
The client and qualified adviser determine PDP, PSE, sector, localization, and transfer obligations. Engineering links each approved requirement to a test and release record.
US-based, asynchronous, evidence-led