These fictional examples show the structure and evidence orientation of an engagement. They are not client work or compliance certificates.
Illustrative finding: Consent withdrawal is available by email but is not linked from the collection interface.
Risk: High · Owner: Product · Target: 30 days
Evidence expected: updated interface, workflow test and consent-register entry.
Finding ID, obligation, current control, gap, risk, action, owner, due date, evidence and reviewer conclusion.
Processing activity, data principal, fields, purpose, basis, source, system, processor, transfer, retention and control owner.
Reference number, request type, identity verification, systems searched, actions, exceptions, response date and approval.
A test run using a wholly fictional organisation and illustrative answers. No client information is shown.
Important: Scores and findings are illustrative, not legal advice, certification or evidence of any real organisation's compliance.