Here is an overview of where you should upload different files to Caralegal:
Processing activities: Upload all information and documents that relate directly to a specific processing activity. These can be
Process descriptions
Risk assessments
Your own data protection impact assessments
Data flow diagrams.
External recipients: Upload information and documents relating to the external recipient. This includes
contracts
Measures of the recipient
Commercial contracts, if applicable
Document Center: Use the document center to
general guidelines
templates
Upload other company-wide documents that are not directly related to a single processing activity, but are relevant to the entire organization or parts of it.
Important: Remember that there should also be a single source of truth for uploads. If you already have a well-functioning document management system or an administration system for service providers or processors, we recommend using links to these repositories.
Note: Specific uploads are also available in other areas of the software, but should always refer to the specific entry.