DPIA / AVV Starter
Fill a short form to generate a starting-point DPIA outline or AVV checklist for an AI deployment — pre-structured to the DSGVO, ready to take to your DPO and counsel.
Your starter document
A template, not legal advice. This fills the standard DSGVO structure with your inputs and marks what still needs completing. A DPIA and an AVV have legal consequences — your DPO and qualified counsel must review and finalise them. Bracketed […] items need your input.
Good to know
Is this a finished DPIA or contract?
No — it’s a structured starting point that fills the standard DSGVO sections with your inputs and flags what still needs completing. Your DPO and qualified counsel must review and finalise it.
What’s the difference between the two?
A DPIA (Datenschutz-Folgenabschätzung, Art. 35) assesses risk to data subjects for high-risk processing. An AVV (Auftragsverarbeitungsvertrag, Art. 28) is the data-processing agreement between controller and processor. Pick whichever you need first.
Where do my inputs go?
Nowhere. The document is assembled in your browser and never leaves it — copy or print it from here.
Want this guaranteed in your own infrastructure?
Get a copy of these results by email and see RAGSuite running on a setup like yours — citation-backed, self-hosted, EU-ready.
Thanks — we’ll be in touch within one business day (DE/EN).
Self-hosting shortens the DPIA.
When AI runs on your own infrastructure with no egress, the riskiest section — third-country transfer and confidentiality — gets much easier to answer. That’s the RAGSuite default.