DPIA, DPA, privacy notice and works council packs — pre-populated for teams deploying AI workflow automation. Drafted against GDPR, ICO guidance, BetrVG and WOR. Use them as your starting point, have your DPO review them, go.
GDPR template pack
English
Data Protection Impact Assessment, pre-populated for AI workflow tools.
A full DPIA template for clients deploying Graft's hybrid workflow assessment. Covers Jira, Microsoft 365 and Google Workspace read-only integrations, a documented Legitimate Interests Assessment, a risk register, retention rules, and sub-processor transfer mechanisms. Built for GDPR Art. 35 and ICO guidance on employee monitoring.
Best for
English
Plain-language companion to the DPIA — written for employees.
A clear, readable privacy notice you can circulate to every employee in scope of a workflow assessment. Explains what metadata is collected, what isn't, why legitimate interests is the lawful basis, and how to opt out. Designed to be adaptable in 10 minutes by your HR or internal comms team.
Best for
English
Standard GDPR DPA between Graft and a controller.
A full Article 28 GDPR Data Processing Agreement covering sub-processors, security measures, breach notification windows, audit rights, international transfers, and a no-individual-scoring clause that's essential for employee-monitoring engagements. Ready to redline.
Best for
Deutsch
Information pack for German works councils under BetrVG §87.
A mitbestimmungsrecht-aware information pack for German Betriebsräte. Explains the processing scope, the n≥5 aggregation guarantee, opt-out procedures, and the separation from HR/performance management. Includes the co-determination considerations your council will ask about first.
Best for
Nederlands
Information pack for Dutch works councils — covers WOR art. 27 instemmingsrecht.
An information pack for Dutch Ondernemingsraden (works councils). Covers the consent right under WOR art. 27, the scope of the processing, the n≥5 aggregation guarantee, and the employee objection right. Written to support a single-meeting consent vote.
Best for
AI workforce tools sit in a compliance grey zone — they process employee metadata, interact with HR systems, and face scrutiny from works councils. Most vendors leave clients to figure out the paperwork themselves. We don't. These templates are the same documents our own clients use and are part of what we mean when we say Graft does the heavy lifting.