Compliance Watcher

Why a continuous DPO module

Every DPO at a mid-sized European company knows there's an Excel
somewhere in SharePoint with 18,000 client emails missing a legal
basis, supplier contracts without DPA clauses, and rejected
candidate CVs stored since 2017. Manually finding them costs
18-35 days per DPO per year. The picture is stale 6 hours later.

Compliance Watcher runs continuously on LMbox, scans new
versions every 30 minutes, and opens Jira tickets for data
owners. The DPO moves from annual reactive to daily
proactive.

The 14 monitored patterns

Categories covered:

• PII in the clear (5 patterns): plaintext emails, undated CRM exports, public/anonymous-link drives, untagged HR files, etc.
• Contracts (3 patterns): missing DPA, undisclosed subprocessors, EU-outbound transfers without standard clauses
• Retention (3 patterns): documents past their declared retention, rejected-candidate CVs > 24 months, expired cookie audits
• Process (3 patterns): missing DPIA on a high-risk treatment, data-subject requests > 30 days, gaps in the breach register

What you get every week

• Automated DPO report every Monday 8 a.m.: open violations by severity, top 5 owners, top 3 patterns, SLA breaches, week-over-week trend
• Real-time dashboard accessible to DPO and legal teams, with drill-down on every detection
• Signed audit log of every detection (timestamp + classifier + score + excerpt) — directly usable in a DPIA or a response to a CNIL inquiry
• Jira tickets auto-assigned to the data owner with severity-driven SLAs (high: 5d, medium: 15d, low: 30d)

Honest limits

• Covers EU GDPR only (CCPA/LGPD/HIPAA expansion on the Q1 2027 roadmap)
• Never deletes a document nor legally commits the organisation (the human DPO decides)
• Won't act on grey areas (ambiguous legal basis)
• Does not catch verbal collusion not documented in your archives