NMQ Protocol
EU compliance hub
GDPR, EU AI Act, ISO 27001, transfers, and consent — international packs only (DE/FR/ES/IT/NL/UK/US).
GDPR
RoPA
Processing activities: purpose, lawful basis, data categories, recipients, retention, and country.
GDPR
DPIA
Step wizard for high-risk processing; links gap items and exports summary JSON.
EU AI Act
AI Act
AI systems with risk level, measures, and human oversight flags.
GDPR
Subprocessors
Vendors, DPA dates, regions — changes audited.
GDPR
Erasure
DSAR erasure requests: create → audit → anonymize registry entries.
GDPR
Transfers
Transfer mechanisms, SCC references, and destination countries.
GDPR
Consent
Lawful basis consent: purpose, channel, proof, and withdrawal date.
ISO 27001
ISO 27001
Annex A control mapping to gap items and evidence links.
