Your first DPIA, in plain language. A first draft that you complete and adopt yourself. Not legal advice.

Are you introducing Copilot or another AI tool, installing cameras, tracking sick leave or opening a customer portal? Answer the questions in plain language and see for free what the check says. Soon you can turn the same answers into a first DPIA (draft) in Word and PDF.

The document is in Dutch.

Start the free check

The check "is a DPIA needed?" is free. You see the outcome with the grounds per criterion.

You get a first DPIA (draft). You complete it and adopt it yourself. Not legal advice.

€149 excl. VAT (€180,29 incl.), per processing

Only for businesses with a Dutch Chamber of Commerce (KVK) number.
One-off, no subscription.

The full document can be ordered soon. You can do the free check now.

What is your DPIA about?

AxonDPIA has four kinds of processing. Each has its own questions and risks.

AI application
You are going to use Copilot or another AI tool with data of employees or customers.
Camera surveillance
You install cameras in or around your building, shop or premises.
For camera surveillance a DPIA is often needed, but not always. It depends, among other things, on the place: do you film a space where the public comes, such as a shop or the street? The check shows which criteria apply to you.
Employee monitoring and absence
You track sick leave, or follow the work, computer use or trips of employees.
Customer portal and CRM
You open a customer portal or record customer data in a CRM.

Is it about something else? Then AxonDPIA does not fit yet.

How it works

1
Answer the questions
In plain language, about 30 to 45 minutes. You can forward technical questions to your IT partner. "I don't know" is always allowed.
2
The free check
After the first four steps you see the outcome of the check "is a DPIA needed?", with the source and the deciding answers per criterion.
3
Pay and receive the document
The full document can be ordered soon.
4
Complete and adopt it yourself
You fill in the open points and adopt the DPIA yourself.

What you get

A first DPIA (draft) in Word and PDF, with these chapters:

Summary for management, starting with the open points
The screening: is a DPIA needed, with a source per criterion
Systematic description with a data flow diagram
Necessity and proportionality, with the points that need your judgement
Risk analysis with likelihood, impact and a 3×3 matrix
Measures and residual risk
Prior consultation of the Dutch DPA (art. 36 GDPR)
Conclusion, action list and open points
Limitations, adoption, sources and legal status

Structure based on art. 35(7) GDPR.

What AxonDPIA does not do

You are the author and you adopt the DPIA.
"I don't know" becomes an open point and counts as the unfavourable value.
The tool draws no conclusion on necessity, balancing of interests and consent. That needs your judgement.
No updates after delivery.
One processing per DPIA.
Legal status as of 26 October 2026.

Frequently asked questions

Do I need a DPIA?

The free check helps you with that question. It looks at art. 35(3) GDPR, the DPIA list of the Dutch Data Protection Authority (Stcrt. 2019, 64418) and the criteria of the European data protection authorities (WP248), with the source for every criterion. If you do not know an answer and it could change the outcome, the check says "cannot be determined". The decision stays with you.

What does "cannot be determined" mean?

That only your answers with "I don't know" can still change the outcome. Our advice then: treat the processing as if a DPIA is needed, and find out the open answers.

Is this enough for the Dutch DPA or an auditor?

A tool cannot promise that. You get a first draft with the structure of art. 35(7) GDPR, with sources and open points. You complete it, adopt it and remain responsible yourself.

What do I do with "judgement needed"?

On necessity, balancing of interests and consent the tool draws no conclusion. You get guiding questions and an empty field. Fill in your own assessment, possibly with your privacy adviser.

What does the AI do at the intake?

Nothing yet: you choose the kind of processing yourself. Later an AI tool may only help choose the template from a short description. You confirm that choice, and the text of the DPIA is always fixed.

What do you keep, and for how long?

Your answers are choices and categories, without names. We store them encrypted. Without an order we delete them 30 days after your last activity. More is in the privacy statement.

Can my IT partner help?

Yes. Technical questions carry the label "Ask your IT partner". With "Save and continue later" you get a link you may forward.

Why not free, like the Dutch government's model DPIA?

That model is a good, free template: you fill in all questions yourself. AxonDPIA asks the questions in plain language, checks your answers with sources and turns them into fixed texts, risks and measures. If you want to do it all yourself, the model is a good choice.