FRAMEWORK STATUS
GDPR
ÚOOÚ · GDPR + Act No. 110/2019 Coll. · effective May 2018
available evidencein progressnot applicable
Automated evidence checks configuredControls are publicly summarized by category
Splnit.eu
splnit.eu/trust/splnit
Trust Center / Frameworks / GDPR
FRAMEWORK STATUS
ÚOOÚ · GDPR + Act No. 110/2019 Coll. · effective May 2018
available evidencein progressnot applicable
CONTROL CATEGORIES
This view is intentionally aggregated. The public detail shows category status, not individual control identifiers or evidence files.
MFA, conditional access, privileged roles, and guest access
available internal evidence
in progressData encryption, key management, data classification, and secure sharing
available internal evidence
in progressIncident response, escalation, statutory deadlines, and lessons learned
available internal evidence
in progressSupplier risk, contractual requirements, questionnaires, and ongoing review
available internal evidence
in progressDOCUMENTS
Locked items are available on request. Public documents can be viewed directly without additional access.
Security Whitepaper
Current early-access security posture, hosting, access, and incident-response summary.
DPA
Public data processing terms and processor commitments.
Sub-processor list
Main sub-processors and processing context maintained in the public DPA page.
Privacy Policy
Public information about Splnit.eu personal data processing.
REGULATION CONTEXT
Regulator
ÚOOÚ
Czech law
GDPR + Act No. 110/2019 Coll.
Effective date
May 2018
Maximum penalty
Up to €20M or 4% of turnover
Request documents or send a security question to the team.
Details of individual controls, control IDs, evidence files, test results, and audit timing could give attackers information about configuration and weak points. Public pages show only category-level aggregate data. More detailed access requires an NDA request.
Procurement or security teams can request more detailed answers about Splnit.eu.
privacy@splnit.euUsually answered within 2 business days
Send security findings and vulnerabilities through the responsible disclosure channel.
security@splnit.euPGP key on request · first response within 24 hours
Send privacy, DPA, and sub-processor questions through the privacy channel.
privacy@splnit.euDPA and privacy questions · usually answered within 2 business days