Skip to main content Skip to footer
Spe­cial­ist solu­tion | privacy SUITE

Data pro­tec­tion soft­ware
for ex­tern­al DSB

Multi-client working
Audit-ready doc­u­ment­a­tion
Ef­fi­cient re­port­ing
Request a demo
Request a demo
Skip ref­er­ence clients

Ex­tern­al data pro­tec­tion – struc­tured, trace­able, ef­fi­cient

As an ex­tern­al data pro­tec­tion officer, you serve mul­tiple clients with dif­fer­ent struc­tures and ex­pect­a­tions. otris privacy sup­ports you in stand­ard­ising your working methods, doc­u­ment­ing evid­ence clearly and man­aging tasks re­li­ably.

Record and version pro­cessing activ­it­ies, con­tracts and TOMs in a struc­tured manner – for con­sist­ent GDPR evid­ence for each Mandate.

Control roles, terms and ap­provals in a process-secure manner – for in­quir­ies and meas­ures with clear re­spons­ib­il­it­ies at the client.

Eval­u­ate status, risks and reports on a client-spe­cif­ic basis – for trans­par­ent com­mu­nic­a­tion and re­li­able reports for your clients.

Skip gallery

Ex­tern­al data pro­tec­tion with otris privacy at a glance

Com­pared to in­tern­al data pro­tec­tion of­ficers, ex­tern­al data pro­tec­tion of­ficers have special re­quire­ments for data pro­tec­tion soft­ware. In ad­di­tion to multi-client cap­ab­il­ity, flex­ib­il­ity and ad­apt­ab­il­ity are crucial: the solu­tion should reflect the client’s data pro­tec­tion or­gan­isa­tion and at the same time support your proven pro­ced­ures. Func­tions for col­lab­or­a­tion and com­mu­nic­a­tion are also im­port­ant, as is a li­cens­ing model that is suit­able for sup­port­ing ex­tern­al clients.

Multi-client capable struc­ture

You manage your clients in a cent­ral­ised, multi-client struc­ture and map the or­gan­isa­tion of each client. Roles and au­thor­isa­tions control read and write access, in­clud­ing for em­ploy­ees who support in­di­vidu­al clients.

Co­oper­a­tion at the VVT

For the record of pro­cessing activ­it­ies (PAR), you are de­pend­ent on input from the client. Web forms and a re­port­ing or up­dat­ing work­flow support re­cord­ing, check­ing and trans­fer to the PAR, as well as auto­mated re­mind­ers.

Cus­tom­ise pro­cesses

You in­cor­por­ate your proven pro­ced­ures as an ex­tern­al data pro­tec­tion officer into the soft­ware, for example via audit pro­cesses and check­lists. Work­flows can struc­ture work steps and map ap­provals with the client in a trace­able manner.

Auto­mate pro­cesses

Re­cur­ring tasks can be ef­fi­ciently managed using work­flows without losing trace­ab­il­ity. These include, for example, no­ti­fic­a­tions for the record of pro­cessing activ­it­ies, hand­ling of in­quir­ies and dealing with data pro­tec­tion in­cid­ents.

Easy scalab­il­ity

With the SaaS version, you can flex­ibly adapt otris privacy to your client base. You can add client li­cences for new clients and reduce them as needed without having to rebuild the system struc­ture.

Sub-license

They map the client’s data pro­tec­tion or­gan­isa­tion and at the same time use your tried-and-tested struc­tures and pro­cesses. The otris licence con­di­tions make it pos­sible to sublet SaaS usage to the re­spect­ive client.

otris privacy

Our all-round solu­tion for pro­fes­sion­al ex­tern­al data pro­tec­tion sim­pli­fies the man­age­ment, doc­u­ment­a­tion and re­port­ing of your data pro­tec­tion work.

Fea­tures that set our data pro­tec­tion man­age­ment soft­ware apart

As an ex­tern­al data pro­tec­tion officer, you need a solu­tion that provides struc­tured support for client work and doc­u­ments results in a trace­able manner. The fol­low­ing fea­tures help you to control pro­cesses, keep records and provide ef­fi­cient re­port­ing.

Range of func­tions. Re­quire­ments as a bench­mark.

There are three soft­ware edi­tions to choose from, al­low­ing you to tailor the solu­tion’s range of func­tions to your needs. You can also combine add-ons to cover func­tions that you need to support your clients. If the stand­ard modules are not suf­fi­cient for your re­quire­ments, otris Con­sult­ing will im­ple­ment cus­tom­ised solu­tions to meet your needs.

User guid­ance. Step by step.

Wizards and context-sens­it­ive action menus are a feature of otris data pro­tec­tion soft­ware. The input aids help users to work through complex tasks step by step and track the pro­cessing status via a pro­gress bar. The traffic light sym­bol­ism sup­ports you in data pro­tec­tion control tasks.

Re­port­ing. Auto­mated eval­u­ations.

Clients receive regular eval­u­ations from their ex­tern­al data pro­tec­tion officer. otris privacy doc­u­ments the data for reports in a struc­tured manner and sup­ports the cre­ation of reports using filters and defined cri­ter­ia – e.g. for activ­ity reports, over­views of meas­ures, ana­lys­is reports, action plan­ning or audit logs. You can create reports ad hoc and send them to clients, or send them auto­mat­ic­ally to defined re­cip­i­ents at fixed times. PDF, HTML and CSV are avail­able as output formats.

Op­er­a­tion. On-premises or cloud.

You can run the otris data pro­tec­tion soft­ware on-premises on your own servers or use it as a cloud ap­plic­a­tion. The cloud version is op­er­ated in a data centre in Germany and com­plies with data pro­tec­tion re­quire­ments. Both op­er­at­ing modes are identic­al in terms of ap­plic­a­tion and user in­ter­face.

„The multi-client cap­ab­il­ity of otris privacy helps us with Or­gan­isa­tion, while the in­teg­rated tools and check­lists assist us in our op­er­a­tion­al work.“

Tanja van Lindt
Data pro­tec­tion con­sult­ant, DRK-Landes­verb­and West­falen-Lippe Be­trieb­swirtschaft­liche Be­r­a­tungs- und Service-GmbH

Edi­tions for ex­tern­al data pro­tec­tion

Select the edition that suits your way of working as an ex­tern­al data pro­tec­tion officer – de­pend­ing on the size of your client struc­ture, team col­lab­or­a­tion and desired op­er­at­ing model.

STAND­ARD

For in­di­vidu­al users start­ing out in sup­port­ing ex­tern­al clients.

  • Quick to get started
  • Pre­dict­able costs without high initial in­vest­ment
  • No com­mit­ment of own IT re­sources
Op­er­a­tion: SaaS
from
149€ / month

Die otris soft­ware AG wird alle hier bereit­ges­tell­ten In­form­a­tion­en aus­schließ­lich in Übere­in­stim­mung mit der Datens­chutzerklärung ver­wenden.

EN­TER­PRISE

Re­com­men­ded for ex­tern­al data pro­tec­tion of­ficers
For sup­port­ing mul­tiple clients with roles, rights and Or­gan­isa­tion­al struc­tures for each client.

  • Team col­lab­or­a­tion via clear user rights
  • Struc­tured input and in­form­a­tion con­sol­id­a­tion for each client
  • Ef­fi­ciency through tem­plates and re­usable data
Op­er­a­tion: SaaS and on-premises
from
419€ / month

Die otris soft­ware AG wird alle hier bereit­ges­tell­ten In­form­a­tion­en aus­schließ­lich in Übere­in­stim­mung mit der Datens­chutzerklärung ver­wenden.

EN­TER­PRISE plus

For clients with more complex re­quire­ments, e.g. mul­ti­lin­gual use or ex­ten­ded eval­u­ation and cus­tom­isa­tion needs.

  • Work­flows for mapping in­di­vidu­al pro­cesses per client
  • In­di­vidu­al reports and cock­pits for client-related eval­u­ations
  • Flex­ible cus­tom­isa­tion of forms and work­flows
Op­er­a­tion: SaaS or on-premises
from
649€ / month

Die otris soft­ware AG wird alle hier bereit­ges­tell­ten In­form­a­tion­en aus­schließ­lich in Übere­in­stim­mung mit der Datens­chutzerklärung ver­wenden.

„otris privacy con­trols the cre­ation of new pro­cessing activ­it­ies through pre­defined process steps, in­volves those re­spons­ible for the process and enables the rest of the doc­u­ment­a­tion process – all with a high stand­ard of se­cur­ity.“

Ex­ten­sions for data pro­tec­tion man­age­ment

Tech­nic­al ex­ten­sions allow you to adapt otris privacy to your re­quire­ments as an ex­tern­al data pro­tec­tion officer in ad­di­tion to the se­lec­ted edition. The ex­ten­sions can be com­bined with the EN­TER­PRISE and EN­TER­PRISE plus edi­tions.

Melde-/Ak­tu­al­is­ier­ungs-Work­flow. Ver­arbei­tung­s­prozesse melden.

The re­port­ing/up­dat­ing work­flow helps you to ef­fi­ciently or­gan­ise the cre­ation and main­ten­ance of the record of pro­cessing activ­it­ies (VVT). You send web forms dir­ectly from the system to the data con­trol­lers at the client, which de­scribe the pro­cessing activ­it­ies in a struc­tured manner. After re­view­ing them, you trans­fer the in­form­a­tion to the VVT or return queries and re­quests for ad­di­tion­al in­form­a­tion.

Re­mind­ers can be sent at defined in­ter­vals for updates; in ad­di­tion, data con­trol­lers can sup­ple­ment or update their pro­cessing activ­it­ies in an over­view. You will be in­formed of any changes. The ex­ten­sion in­cludes the stand­ard web form as well as in­stall­a­tion and setup; cus­tom­isa­tions can be im­ple­men­ted by otris Con­sult­ing.

Inquiry work­flow. Record and process in­quir­ies.

The enquiry work­flow helps you to auto­mat­ic­ally record in­com­ing in­quir­ies in otris privacy and to doc­u­ment the pro­cessing pro­ced­ure in a trace­able manner. En­quirers can submit in­quir­ies by e-mail or via a web form, in­clud­ing at­tach­ments. The in­quir­ies are then pro­cessed in a struc­tured manner in the system.

Data breach. Report data breaches.

With the ‘Data breach’ ex­ten­sion, you provide your client’s em­ploy­ees with a process for re­port­ing in­tern­al data breaches in a struc­tured manner. A web form is used to record the cir­cum­stances, af­fected data cat­egor­ies, af­fected groups of people and meas­ures already taken – without any special know­ledge of data pro­tec­tion.

The report is sent to the pre­defined re­spons­ible de­part­ment. In ad­di­tion, the system sends a no­ti­fic­a­tion email; re­cip­i­ents can be con­figured. A report on the in­cid­ent is auto­mat­ic­ally provided.

„otris privacy sim­pli­fies our data pro­tec­tion man­age­ment through cent­ral­ised data storage and auto­ma­tion.“

Wolfgang Schröder
DSB at JAB JOSEF AN­STO­ETZ KG

In prac­tice: ex­tern­al data pro­tec­tion with otris privacy

High service quality at man­age­able costs – that is what clients expect from ex­tern­al data pro­tec­tion of­ficers. This re­quire­ment can be par­tic­u­larly chal­len­ging in data pro­tec­tion man­age­ment, because in­form­a­tion, evid­ence and co­ordin­a­tion are con­stantly coming to­geth­er. otris privacy sup­ports you with prac­tic­al func­tions and cus­tom­is­able pro­cesses to ensure that quality and effort remain in balance.

Adopt struc­tures and pro­cesses

Once you have set up a data pro­tec­tion or­gan­isa­tion, you can reuse it in otris privacy and use it as a tem­plate for other clients. This allows you to draw on proven struc­tures and pro­cesses for new clients and adapt them in just a few steps. As a result, you can start op­er­a­tion­al work more quickly and reduce the effort re­quired for new setups.

Com­mu­nic­a­tion

Com­mu­nic­a­tion with clients is a central part of ex­tern­al data pro­tec­tion work. otris privacy sup­ports com­mu­nic­a­tion via func­tions such as web forms, which are used to sys­tem­at­ic­ally query pro­cessing activ­it­ies at data con­trol­lers on the client side.

After your review, queries can be sent to the client or in­form­a­tion can be trans­ferred to the record of pro­cessing activ­it­ies (VVT). The process, in­clud­ing com­mu­nic­a­tion, com­ments and notes, is auto­mat­ic­ally logged. This creates trans­par­ency and sup­ports activ­ity records and trace­able service billing.

Ad­min­is­tra­tion and man­age­ment

otris privacy sup­ports you not only in op­er­a­tion­al data pro­tec­tion work, but also in ad­min­is­trat­ive tasks. This in­cludes doc­u­ment man­age­ment: from meeting minutes to service con­tracts to order doc­u­ments, you can manage client-related doc­u­ments in a struc­tured manner within the system. In ad­di­tion, you can track ex­penses per client, use eval­u­ations for your con­trolling and create trans­par­ent in­voices.

FAQ: Fre­quently asked ques­tions about data pro­tec­tion soft­ware for ex­tern­al data pro­tec­tion of­ficers

Who would benefit from data pro­tec­tion soft­ware for ex­tern­al data pro­tec­tion of­ficers?

For ex­tern­al data pro­tec­tion of­ficers who serve mul­tiple clients sim­ul­tan­eously and want to map tasks, evid­ence and re­port­ing in a struc­tured manner. Key factors include multi-client cap­ab­il­ity, trace­able pro­cesses and ef­fi­cient col­lab­or­a­tion with data con­trol­lers at the client.

How does otris privacy support col­lab­or­a­tion on the record of pro­cessing activ­it­ies (RPA)?

Process man­agers provide in­form­a­tion in a struc­tured manner via web forms and a re­port­ing or update work­flow. After you have checked the in­form­a­tion, it is trans­ferred to VVT; update re­mind­ers can be auto­mated ac­cord­ing to spe­cif­ic cri­ter­ia.

Can I manage data subject in­quir­ies and data breaches in a legally com­pli­ant manner?

Yes. Re­cur­ring tasks can be managed in a trace­able manner using work­flows, e.g. for In­quir­ies and the pro­cessing of data breaches. In ad­di­tion, ex­ten­sions support the struc­tured re­cord­ing and doc­u­ment­a­tion of the pro­cessing pro­ced­ure.

How does the soft­ware scale when I acquire new clients?

In the SaaS version, you can flex­ibly add or reduce client li­cences without having to rebuild the system struc­ture. This allows otris privacy to adapt to your client base, even as it grows.

Or­gan­ise client work ef­fi­ciently with data pro­tec­tion man­age­ment soft­ware from otris

With otris privacy, you can reduce the effort in­volved in client support because struc­tures, pro­cesses and evid­ence are managed in a trace­able manner for each client. At the same time, you can keep track of tasks, terms and re­port­ing – even as your client base grows. Request a guided demo or book a con­sulta­tion ap­point­ment.

Get in touch

Per­son­al­ised online demo | No strings at­tached. Free of charge.

otris soft­ware AG will use all in­form­a­tion provided here ex­clus­ively in ac­cord­ance with the privacy policy.

Your contact

Back to navigation Back to content Back to navigation Back to content