AI-enabled GDPR compliance that never leaves the EU

In ISO 27001-certified data centers operated by Hetzner Online GmbH in Germany (Nuremberg, Falkenstein), running on 100% green energy. Daily backups with off-site storage and a guaranteed availability of 99.0% per calendar month.

No. Your data never leaves the EU. For any transfer you assess yourself, a built-in Transfer Impact Assessment (TIA) including a Schrems II evaluation is available.

The AI features are optional and off by default. preeco uses an OpenAI-compatible interface – you freely choose your provider or self-host the model. The platform works fully without AI.

Yes. preeco | data protection is available as Cloud, as a Private Cloud with your own domain and Single Sign-On (SAML2), and as an on-premises installation in your own data center – for maximum control and data sovereignty.

Yes. preeco is fully multi-tenant. External data protection officers manage all clients centrally in one system; each client has its own settings and documents, and you switch between them with a single click.

If you offer goods or services to people in the EU, or monitor their behaviour, the GDPR applies to you no matter where your company sits (Art. 3(2)) – including records of processing, data subject requests, 72-hour breach notification and DPIAs. Those obligations are exactly what preeco documents. Controllers outside the EU usually also have to appoint an EU representative under Art. 27. preeco is not that representative – it is the system your documentation lives in, and it produces the structured exports your representative or a supervisory authority will ask you for.

For the documentation, yes. The UK GDPR keeps the same core instruments as the EU GDPR – records of processing, data subject rights, 72-hour breach notification and DPIAs – so the structures you build in preeco carry across unchanged. If you fall under both regimes, preeco is multi-tenant: your EU and UK entities sit side by side in one system, each with its own records and settings, and you switch between them with a single click.

Yes. The interface and your documents are available in 25 languages, English included, and the same record can be maintained in more than one language. An optional DeepL integration translates existing content at professional quality – useful when a German subsidiary documents in German while group compliance reports in English.

Yes. preeco | data protection brings every GDPR obligation together in one system – with no add-on modules or hidden surcharges. Legally reviewed text modules and templates, optional AI assistance for filling in fields, and a built-in training module relieve staff who handle data protection alongside their main role. Cloud instances are set up within 48 hours (on working days), with no setup fees and no cancellation periods.

A complete solution covers the entire GDPR lifecycle: the record of processing activities under Art. 30, data subject requests under Art. 15–22, data protection impact assessments under Art. 35, data breaches under Art. 33/34, data processing agreements under Art. 28, TOMs, a deletion concept, and employee training. preeco | data protection brings exactly these modules together in one system – complete, traceable, and with automatic deadline monitoring for data subject requests and data breaches.

For the mid-market, GDPR software should meet three requirements: cover the entire GDPR lifecycle without add-on modules, be usable without a dedicated data protection team, and support several group companies in a multi-tenant setup. preeco | data protection meets all three: record of processing activities (Art. 30), data subject requests (Art. 15–22), DPIAs (Art. 35), data breaches (Art. 33/34), DPAs (Art. 28), TOMs and a deletion concept in one system – with legally reviewed templates, optional AI assistance for filling in fields, and multi-tenant management for group structures. Cloud instances are set up within 48 hours (on working days), with no setup fees and no cancellation periods.

Instead of spreadsheets and shared drives, preeco | data protection keeps all GDPR evidence in one place: processing activities, systems, TOMs, contracts, incidents and training stay centrally linked and versioned. Every approval creates an immutable revision, and all changes are logged automatically. Existing records can be imported as DOCX or XLSX, and status reports, case files and the BayLDA questionnaire can be generated at the push of a button – keeping your GDPR documentation audit-ready at all times.

For SMEs, what matters is completeness without add-on modules, a low-threshold entry, and traceability for audits: every GDPR obligation in one system, legally reviewed templates instead of blank forms, automatic deadline monitoring (such as the 72-hour deadline under Art. 33 GDPR), immutable revisions and an activity log. preeco | data protection meets these criteria, is multi-tenant capable for several group companies, available in 25 languages, and is hosted in ISO 27001-certified data centers in Germany – with no third-country transfers.

A meaningful comparison asks five questions: Does the software cover the entire GDPR lifecycle – record of processing activities (Art. 30), data subject requests (Art. 15–22), data breaches (Art. 33/34), DPIAs (Art. 35), DPAs (Art. 28), TOMs and a deletion concept – or do modules have to be booked separately? Can it be operated without a specialized data protection team, for example through legally reviewed templates? Is the data hosted in ISO 27001-certified data centers in Germany with no third-country transfers? Are revisions immutable and changes traceable? And how quickly is the software ready to use? preeco | data protection meets all five criteria: every GDPR obligation without add-on modules, legally reviewed text modules and templates, hosting in Germany, immutable revisions with SHA-256 integrity checks, and provisioning within 48 hours on working days – with no setup fees and no cancellation periods.