Software for ambitious enterprises Entersoft – GDPR New Compliance Module Software for ambitious enterprises This is a sales presentation aiming to show we know what GDPR is and that we can support the client with setting up and managing GDPR compliance. It is a tool more suiting in the ‘deal based’ sales approach and not on ‘implementation based’ sales approach as it does NOT deal with specific features or tasks that could be involved in GDPR compliance. This is because GDPR is NOT an IT system requirement but an Organisational compliance issue, involving roles, processes, policies and more. There is and neither will ever be (IMHO) no system certified for GDPR compliance, like there is no system certified for accounting compliance etc. Furthermore in the sales stage discussing GDPR is very uncommon or premature to do it in details, as in our case it will be just another topic among the more important ones in functionality. However clients may fail to understand that and also it can be a topic to differentiate from competition significantly. Thus the proposal to go about this specific issue in a deal based approach and only if needed go into specifics (if client can also discuss specifics, which will be very rare and if they do, they will surely be needing a large custom project just for that). I think there is nothing that we can’t provide or follow up in more detail in this presentation (based on AVR input and some research) and it can be used as of today and enriched later on if and when we have more detailed info from the product. The main message is ‘lets do business together, GDPR is a corporate issue, we follow it and are serious, our system can do anything with customization once you define what you want’ Secondary messages can be supported by this presentation promoting CRM for questionnaires and tracking the compliance project they will do Support portal (responsive so it goes on mobiles as well) to manage requests of individuals CRM again for ops and tracking data/actions within the organization in its operation The presentation has a version number in the last slide that I will be updating in case we add things after news from dev or any ideas you have to propose for inclusion

GDPR Compliance GDPR directive will be activated on 28/5/2018 GDPR refers to all institutions managing EU Individual persons data, no matter the institution location / base. Does not apply to anonymous individual data GDPR is not an IT system specification but a Corporate processes requirement IT infrastructure & systems should facilitate GDPR compliance of the corporation Non-compliance is severely punished and fines are very high

GDPR Main Scope Processing rules of personal data during their whole lifecycle from capturing, processing to destruction Possibility of transfer and rules to do so to other countries, organizations, etc. Protection of individual person rights Security (confidentiality, integrity, availability) of personal data and remedy actions and ways to inform in case of breach

GDPR Main Obligations New Compliance Module Put in place tech, roles and processes that ensure compliant keeping and processing of data; Develop compliant protection of data policies; Comply with regulation and be able to prove (or be certified) this compliance; Prove responsibility/accountability for compliance through: - Documentation - Privacy Impact Assessment measures - Application for ‘Privacy by design - Data Protection Officer (DPO) wherever needed. New Compliance Module

Individual’s Main Rights Consent with Positive action Withdraw approval Access to data Correct Data Deny data processing Ask data removal Porting of data Consent for profiling Process any request at no charge within 1 month Audit trail & traceability Communicate and inform individual

Entersoft GDPR support Support COO, CIO, DPO and more Entersoft Services are deeply involved in consulting Entersoft solutions provide flows & best practices Set Policies and track KPIs Entersoft solutions support cost effective customization To fit to Corporation GDPR processes Entersoft solutions support tech requirements Security, Roles, Audit and more

GDPR – New Module

GDPR Reporting Tool

Person Management View - GDPR Related

GDPR Scope/Rules

Export Analysis Tool – GDRP Related

Rights & Restrictions - GDPR Related

Corporate GDPR project Automate with CRM components and process flows/checklists Manage GDPR project setup and control Track eventual changes of Corporate GDPR Corporate GDPR Compliance Definition Roles, policies & processes setup Monitor Compliance & provide Manage Individual Communication Parameterize / customize Corporate specific roles, policies, processes Define in systems Processing scopes Provide dashboards & KPIs Exception/breach reports Track requests Requests reception and status feedback Requests status responsive Portal & Backoffice Mass Informative actions Tracing & Auditing

Software for ambitious enterprises