DSPT deadline

Audit-ready, by default.

Track every control, evidence the work as you go, and manage the risks behind GDPR, Cyber Essentials, DSPT and ISO 27001 — from one place.

Next deadline · DSPT

Target {{ dsptTargetLabel }}

Overall readiness

{{ readiness }}%

{{ doneCount }} of {{ totalCount }} controls in place

Open risks

{{ openRiskCount }}{{ criticalRiskCount }} critical

on the register

Do now

{{ nowCount }}{{ weekCount }} this week

priority-1 controls

Readiness by standard

{{ s.label }} {{ s.done }}/{{ s.total }} · {{ s.pct }}%

Status mix

{{ readiness }}% in place

Priority queue · do now

Risk heatmap

Impact

Likelihood

Ref	Control / item	Standards	Owner	Priority	Status
{{ t.ref }}	{{ t.control }} {{ t.plain }} ↳ {{ t.notes }}	{{ t.standardsText }}	{{ t.ownerLane }}	{{ t.priorityLabel }}	✓ Completed {{ t.completedLabel }}

{{ s.standard }} {{ s.status }} · {{ s.sequence }} to certify · {{ s.owner }}

Key evidence · {{ s.evidence }}

{{ s.pct }}%

{{ s.doneCount }}/{{ s.totalCount }} controls in place

Key evidence · {{ stdEvidence }}

{{ stdSequence }} to certify · Owner {{ stdOwner }}

{{ stdCountLabel }} {{ stdPct }}%

Cyber Essentials Plus is Cyber Essentials verified by a hands-on external audit — the same controls below, independently tested with a vulnerability scan. Get CE certified first, then book the Plus assessment.

Outstanding · {{ stdOutCount }} to do

{{ t.ownerLane }} {{ t.control }} {{ t.ref }} · {{ t.plain }}

In place · {{ stdDoneCount }} done

{{ t.ownerLane }} {{ t.control }} {{ t.ref }} · {{ t.plain }}

ID	Risk	L	I	Score	Rating	Treatment	Controls done	Owner	Status
{{ r.id }}	{{ r.risk }} {{ r.cause }}	{{ r.likelihood }}	{{ r.impact }}	{{ r.score }}	{{ r.rating }}	{{ r.treatmentText }}	{{ r.coverageLabel }}	{{ r.owner }}

{{ supplierCountLabel }} Both We Are Care Ltd + Connect Connect Connect only

Supplier	Service / data	Location	Transfer	DPA	DPA doc / evidence	Owner
{{ s.supplier }}{{ s.entity }} {{ s.dataCats }}	{{ s.service }}	{{ s.location }}	{{ s.transfer }}		✓{{ s.fileName }} ↗ ↑ PDF	{{ s.owner }}

{{ d.ref }} {{ d.riskLevel }} risk

Trigger · {{ d.trigger }}

Owner {{ d.owner }} · DPIA needed: {{ d.needed }}

DPIA doc

↗

Document	Type	Owner	Ver.	Status	Standard	Link	File
{{ d.document }}{{ d.notes }}	{{ d.type }}	{{ d.owner }}	{{ d.version }}	{{ d.status }}	{{ d.standard }}	↗	✓{{ d.fileName }} Published ↗ ↑ ↑ Upload

{{ trCurrent }} / {{ trTotal }} certificates current

{{ trExpiring }} expiring soon

{{ trOutstanding }} outstanding / expired

Course	Provider	Completed	Renewal due	Status	Certificate
			{{ c.renewalLabel }}	{{ c.statusLabel }}	✓{{ c.certName }} ↑ Upload

Overdue

Due soon

Mark a check done and its next due date rolls forward automatically by its cadence. Flags appear here and on the Overview as each one nears due.

{{ g.frequency }} · {{ g.count }} checks {{ g.flaggedLabel }}

Check	Owner	Last done	Next due	Status
{{ r.task }} {{ r.notes }}	{{ r.ownerLane }}	{{ r.lastDoneLabel }}	{{ r.nextDueLabel }} {{ r.dueText }}	{{ r.statusLabel }}

{{ controlsOutstanding }} of {{ controlsTotal }} controls still open · grouped by ISO 27001 theme · linked to the Master Tracker (shared refs update both).

{{ g.theme }} · {{ g.count }} {{ g.openLabel }}

Ref	Control	Status	Current state / evidence	Owner	Maps to	Action needed
{{ c.ref }}	{{ c.control }}	✓ {{ c.completedLabel }}	{{ c.evidence }}	{{ c.owner }}	CE · {{ c.ceTheme }} DSPT	{{ c.action }}

{{ ropaHeader.version }} Last reviewed {{ ropaHeader.lastReviewedLabel }} {{ ropaHeader.completeLabel }}

{{ ropaCount }} processing activities · We Are Care Ltd as controller (UK GDPR Art 30) · {{ ropaGaps }} with open gaps.

Special / criminal

Lawful basis (Art 6)

Art 9 / 10 condition

Data subjects

Personal data

Source system

Recipients / processors

International transfers

Retention

Status / gaps · {{ r.status }}

{{ retentionHeader.version }} Last reviewed {{ retentionHeader.lastReviewedLabel }} {{ retentionHeader.completeLabel }}

{{ retentionCount }} record types · the single source for retention periods, referenced by the Privacy Policy, Privacy Notice and APD.

Record type	Retention period	Basis / guideline	Product action
{{ r.recordType }}	{{ r.period }}	{{ r.basis }}	{{ r.action }}

{{ transfersHeader.version }} Last reviewed {{ transfersHeader.lastReviewedLabel }} {{ transfersHeader.completeLabel }}

{{ transfersCount }} systems · {{ transfersOpen }} transfers still needing a documented safeguard. US transfers need a DPF certification or an IDTA; UK/EU rely on adequacy.

System / processor	Country	Data transferred	Safeguard / mechanism	Status
{{ t.system }}	{{ t.country }}	{{ t.data }}	{{ t.safeguard }}	{{ t.status }}

{{ apdHeader.version }} Last reviewed {{ apdHeader.lastReviewedLabel }} {{ apdHeader.completeLabel }}

Adopted by the Board

Retention summary (§4)

Record	Retention	Basis
{{ a.record }}	{{ a.retention }}	{{ a.basis }}

This compiles every register and policy into one document. Click Save as PDF, then choose your PDF printer / “Save as PDF”.

Compliance Management Pack

Audit Pack — full position

The complete compliance picture for We Are Care — controls, processing records, retention, transfers, risks, training and policies — produced for audit and available to the Information Commissioner on request.

Generated{{ generatedDate }}

Pack versionv1.4

ControllerWe Are Care Ltd · Companies House 14772282

ICO registrationZC142999

Group entityWe Are Care Connect Ltd · 17179577

DP contactprivacy@wearecare.co.uk

Owner{{ ownerName }}

Security / DSL{{ securityLead }} · {{ dslName }}

{{ readiness }}%

Controls in place ({{ doneCount }}/{{ totalCount }})

Open risks · {{ criticalRiskCount }} critical

DPAs outstanding

Reviews due / overdue

{{ s.label }} {{ s.done }}/{{ s.total }} · {{ s.pct }}%

1 · Security Control Register

ISO 27001 / Cyber Essentials / DSPT control state and evidence.

Ref	Control	Status	Current state / evidence	Owner	Action
{{ c.ref }}	{{ c.control }}	{{ c.statusLabel }}	{{ c.evidence }}	{{ c.owner }}	{{ c.action }}

2 · Master Tracker

Ref	Control / item	Standards	Owner	Priority	Status
{{ t.ref }}	{{ t.control }}	{{ t.standardsText }}	{{ t.ownerLane }}	{{ t.priorityLabel }}	{{ t.statusLabel }}

3 · Risk Register

ID	Risk	L	I	Score	Rating	Treatment	Owner	Status
{{ r.id }}	{{ r.risk }}	{{ r.likelihood }}	{{ r.impact }}	{{ r.score }}	{{ r.rating }}	{{ r.treatmentText }}	{{ r.owner }}	{{ r.status }}

4 · Record of Processing Activities

We Are Care Ltd as controller · UK GDPR Article 30.

#	Activity	Lawful basis	Data / special	Recipients	Retention
{{ r.n }}	{{ r.activity }} {{ r.purpose }}	{{ r.lawfulBasis }} {{ r.special }}	{{ r.dataCats }}	{{ r.recipients }}	{{ r.retention }}

5 · Retention Schedule

Record type	Retention period	Basis
{{ r.recordType }}	{{ r.period }}	{{ r.basis }}

6 · International Transfers

System	Country	Data	Safeguard	Status
{{ t.system }}	{{ t.country }}	{{ t.data }}	{{ t.safeguard }}	{{ t.status }}

7 · DPIA Register

Ref	Activity	Trigger	Risk	Status	Owner
{{ d.ref }}	{{ d.activity }}	{{ d.trigger }}	{{ d.riskLevel }}	{{ d.status }}	{{ d.owner }}

8 · Supplier & DPA Register

Supplier	Service / data	Location	DPA	Owner
{{ s.supplier }}	{{ s.dataCats }}	{{ s.location }}	{{ s.dpa }}	{{ s.owner }}

9 · Training Register

{{ g.name }} · {{ g.role }}

Course	Provider	Completed	Renewal	Status	Certificate
{{ c.course }}	{{ c.provider }}	{{ c.completed }}	{{ c.renewalLabel }}	{{ c.statusLabel }}	{{ c.certName }}

10 · Reviews & recurring checks

Check	Owner	Last done	Next due	Status
{{ r.task }}	{{ r.ownerLane }}	{{ r.lastDoneLabel }}	{{ r.nextDueLabel }}	{{ r.statusLabel }}

11 · Document & Policy Index

Document	Type	Owner	Ver.	Status	Link
{{ d.document }}	{{ d.type }}	{{ d.owner }}	{{ d.version }}	{{ d.status }}	{{ d.link }}

12 · {{ apdTitle }}

We Are Care Ltd · Companies House 14772282 · ICO ZC142999 · Generated {{ generatedDate }} · Maintained as a living record, reviewed monthly.

{{ c.label }}