DSGVO RAG-Readiness Scorecard
Nine questions on the things that actually block an AI rollout on internal documents — residency, DPIA, AVV, Betriebsrat, retention, audit. Get a score and a prioritised gap list.
As you answer, your readiness score and the gaps to close will appear here.
Self-hosting and local models keep residency and egress under your control; citation-backed answers cover transparency; built-in query logs and audit support accountability; and project isolation helps data minimisation. The legal pieces — DPIA, AVV, Betriebsrat — stay yours, but the technical evidence gets much easier.
Self-assessment, not legal advice. A readiness signal to surface gaps before deployment — not a certification or a substitute for your DPO and counsel. Map your processing and run a DPIA where the DSGVO requires it.
Good to know
How is the score calculated?
Each “Yes” counts fully, “Partly” counts half, “No” counts zero, and “N/A” is excluded from the total. The percentage is your share of the applicable points — a readiness signal, not a certification.
Is this a compliance guarantee?
No. It’s a structured self-check to surface gaps before you deploy AI on real internal data. Pair it with your DPO, a DPIA where needed, and qualified counsel.
Does it store my answers?
No — scoring runs entirely in your browser. Nothing is uploaded or saved.
Want this guaranteed in your own infrastructure?
Get a copy of these results by email and see RAGSuite running on a setup like yours — citation-backed, self-hosted, EU-ready.
Thanks — we’ll be in touch within one business day (DE/EN).
Make the technical evidence the easy part.
RAGSuite self-hosts on your infrastructure with citation-backed answers, query tracing and audit logs — so residency, transparency and accountability are provable, not promised.