STANDARD
For individual users starting out in supporting external clients.
- Quick to get started
- Predictable costs without high initial investment
- No commitment of own IT resources
As an external data protection officer, you serve multiple clients with different structures and expectations. otris privacy supports you in standardising your working methods, documenting evidence clearly and managing tasks reliably.
Record and version processing activities, contracts and TOMs in a structured manner – for consistent GDPR evidence for each Mandate.
Control roles, terms and approvals in a process-secure manner – for inquiries and measures with clear responsibilities at the client.
Evaluate status, risks and reports on a client-specific basis – for transparent communication and reliable reports for your clients.
Compared to internal data protection officers, external data protection officers have special requirements for data protection software. In addition to multi-client capability, flexibility and adaptability are crucial: the solution should reflect the client’s data protection organisation and at the same time support your proven procedures. Functions for collaboration and communication are also important, as is a licensing model that is suitable for supporting external clients.

As an external data protection officer, you need a solution that provides structured support for client work and documents results in a traceable manner. The following features help you to control processes, keep records and provide efficient reporting.
There are three software editions to choose from, allowing you to tailor the solution’s range of functions to your needs. You can also combine add-ons to cover functions that you need to support your clients. If the standard modules are not sufficient for your requirements, otris Consulting will implement customised solutions to meet your needs.
Wizards and context-sensitive action menus are a feature of otris data protection software. The input aids help users to work through complex tasks step by step and track the processing status via a progress bar. The traffic light symbolism supports you in data protection control tasks.
Clients receive regular evaluations from their external data protection officer. otris privacy documents the data for reports in a structured manner and supports the creation of reports using filters and defined criteria – e.g. for activity reports, overviews of measures, analysis reports, action planning or audit logs. You can create reports ad hoc and send them to clients, or send them automatically to defined recipients at fixed times. PDF, HTML and CSV are available as output formats.
You can run the otris data protection software on-premises on your own servers or use it as a cloud application. The cloud version is operated in a data centre in Germany and complies with data protection requirements. Both operating modes are identical in terms of application and user interface.
„The multi-client capability of otris privacy helps us with Organisation, while the integrated tools and checklists assist us in our operational work.“
Select the edition that suits your way of working as an external data protection officer – depending on the size of your client structure, team collaboration and desired operating model.
For individual users starting out in supporting external clients.
Recommended for external data protection officers
For supporting multiple clients with roles, rights and Organisational structures for each client.
For clients with more complex requirements, e.g. multilingual use or extended evaluation and customisation needs.
„otris privacy controls the creation of new processing activities through predefined process steps, involves those responsible for the process and enables the rest of the documentation process – all with a high standard of security.“
Technical extensions allow you to adapt otris privacy to your requirements as an external data protection officer in addition to the selected edition. The extensions can be combined with the ENTERPRISE and ENTERPRISE plus editions.
The reporting/updating workflow helps you to efficiently organise the creation and maintenance of the record of processing activities (VVT). You send web forms directly from the system to the data controllers at the client, which describe the processing activities in a structured manner. After reviewing them, you transfer the information to the VVT or return queries and requests for additional information.
Reminders can be sent at defined intervals for updates; in addition, data controllers can supplement or update their processing activities in an overview. You will be informed of any changes. The extension includes the standard web form as well as installation and setup; customisations can be implemented by otris Consulting.
The enquiry workflow helps you to automatically record incoming inquiries in otris privacy and to document the processing procedure in a traceable manner. Enquirers can submit inquiries by e-mail or via a web form, including attachments. The inquiries are then processed in a structured manner in the system.
With the ‘Data breach’ extension, you provide your client’s employees with a process for reporting internal data breaches in a structured manner. A web form is used to record the circumstances, affected data categories, affected groups of people and measures already taken – without any special knowledge of data protection.
The report is sent to the predefined responsible department. In addition, the system sends a notification email; recipients can be configured. A report on the incident is automatically provided.
„otris privacy simplifies our data protection management through centralised data storage and automation.“
High service quality at manageable costs – that is what clients expect from external data protection officers. This requirement can be particularly challenging in data protection management, because information, evidence and coordination are constantly coming together. otris privacy supports you with practical functions and customisable processes to ensure that quality and effort remain in balance.
Once you have set up a data protection organisation, you can reuse it in otris privacy and use it as a template for other clients. This allows you to draw on proven structures and processes for new clients and adapt them in just a few steps. As a result, you can start operational work more quickly and reduce the effort required for new setups.
Communication with clients is a central part of external data protection work. otris privacy supports communication via functions such as web forms, which are used to systematically query processing activities at data controllers on the client side.
After your review, queries can be sent to the client or information can be transferred to the record of processing activities (VVT). The process, including communication, comments and notes, is automatically logged. This creates transparency and supports activity records and traceable service billing.
otris privacy supports you not only in operational data protection work, but also in administrative tasks. This includes document management: from meeting minutes to service contracts to order documents, you can manage client-related documents in a structured manner within the system. In addition, you can track expenses per client, use evaluations for your controlling and create transparent invoices.
For external data protection officers who serve multiple clients simultaneously and want to map tasks, evidence and reporting in a structured manner. Key factors include multi-client capability, traceable processes and efficient collaboration with data controllers at the client.
Process managers provide information in a structured manner via web forms and a reporting or update workflow. After you have checked the information, it is transferred to VVT; update reminders can be automated according to specific criteria.
Yes. Recurring tasks can be managed in a traceable manner using workflows, e.g. for Inquiries and the processing of data breaches. In addition, extensions support the structured recording and documentation of the processing procedure.
In the SaaS version, you can flexibly add or reduce client licences without having to rebuild the system structure. This allows otris privacy to adapt to your client base, even as it grows.
With otris privacy, you can reduce the effort involved in client support because structures, processes and evidence are managed in a traceable manner for each client. At the same time, you can keep track of tasks, terms and reporting – even as your client base grows. Request a guided demo or book a consultation appointment.