What you see here
You reach this screen from the menu under My Third Party Dossier, first item Processes we share. The page title is Processes we share with others.
Every business works with others: suppliers, IT partners, an accountant, a payroll provider. You may not have thought about it, but you often share personal data along the way. When you hand customer invoices to your accountant, you share the personal details on those invoices. Your IT partner may have access to your website and the data in it. And in online tools such as Facebook, Instagram, Office 365, Odoo, WhatsApp, Google Analytics, ChatGPT or Zoom you regularly type a customer’s name and phone number. Perfectly normal, but GDPR expects you to record those processing activities and third parties in your dossier.
At the top are the processes you have already added, each showing the Partner company and the status of the Data sharing agreement. Below that, Consider adding offers ready-made cards such as Accounting, Payroll, IT support, Social media - Facebook / Instagram, Website analytics, Sales / CRM platform, Payment partner and AI-assisted content creation. If you have added nothing yet, you see You haven’t added any processes yet!
A card can carry one of these notes:
- Not sent: you have not sent the agreement request yet.
- Pending since a date, with Link valid until: the third party has not answered yet. The link in their email is valid for 30 days; if it expires, send the request again.
- Changes requested: the third party asked for changes. Reply with a new version or a message in the agreement.
- Declined by Third Party, possibly with their feedback. Once you send an improved version, the card reads Declined on a date, improved version sent.
- The request email could not be delivered: check the contact details and send the request again.
- AI Discovered: this third party was detected automatically on your website.
- Stopped on: the request was stopped.
What is expected of you
- Click a suggested card to add the process to your dossier. If what you need is missing, use the More processes… tile for the full list or create your own process.
- Check the data items on the card: do they reflect the data you actually share? Adjust where needed.
- Select the third party from the list or type in their details.
- Decide what to do about the data sharing agreement. GDPRWise can send a request to the third party for approval. You see it first, with the tabs Email Preview and Agreement Preview. The email goes to the third party’s privacy contact with a link; they can review and answer without a GDPRWise account. If you prefer to wait, or the party already has an agreement in place, tick the box saying an agreement already exists. For large vendors such as Microsoft or Google, which publish their own agreement, the app advises you first and offers Record their DSA instead or Send anyway.
- When a card shows Changes requested, click its document icon to open the agreement. Read the request in the history and answer with Edit text, with Regenerate from the dossier under More actions, or with Send a message. How the versions and the acceptance work is explained in How data sharing agreements work in GDPRWise.
- If a process turns out not to apply, delete it. A request that is no longer relevant can be stopped from the card; the app first asks you to confirm.
You do not have to finish this in one go. Make a start today, let it settle and complete it later. Everything is saved automatically.
Next step
Once every card shows an accepted agreement, this screen is done. Stopped requests stay reachable through the Stopped requests link at the bottom of the page. If your business receives data from others, for example when you carry out services for a client, go to Processes others share. The generated agreements are collected on the Data Sharing Agreements tab under GDPR Documents. For the background, read Your Third-Party Dossier: With Whom Is Data Shared?.
Watch the video
In two minutes you see how the Third-Party Dossier is built and how an agreement is sent: watch the Third-Party Dossier video.