2026
GDPR Compliance Platform
Connects to a company's mail, file servers and code repositories, maps what personal data they actually hold, and generates the GDPR documentation that describes it. Built at OpenHack Vienna.
The problem
The register of processing activities a company signed off last year stops being accurate as soon as someone connects a new data source, and nobody finds out until the next audit. Checking properly means going through every mailbox, file share and repository in the organisation by hand.
The approach
The platform connects to the systems a company already runs, meaning mail, file servers and code repositories, and works out what personal data is in them and how it moves between them. That map then drives the documents GDPR requires, plus a score for how complete each one is.
Models run locally through Ollama rather than through a hosted API. The whole job of this tool is reading a company's most sensitive data, so shipping that data off to a third party to analyse would rather defeat the point.
The outcome
Built and demoed at OpenHack Vienna. Next.js frontend, Python analysis backend, PostgreSQL, and the whole thing containerised so it can run on premise.