Tools — NyxqLab Blog

① Does your company comply with data protection?

GDPR (EU), CCPA/CPRA (California) and PIPEDA (Canada) — quick check of the most common compliance gaps.

We have an up-to-date Record of Processing Activities
Every processing activity has a documented legal basis (not just default 'consent')
We have signed data processing agreements with all vendors
There's a documented breach response procedure (72h)
Personal data is encrypted in transit and at rest
There's an operational procedure to handle data subject rights requests on time
We have a Data Protection Officer designated (if required by size/activity)
We perform Data Protection Impact Assessments for high-risk processing
Employees with access to personal data have received specific training
We review and audit compliance at least once a year

② Is your company post-quantum ready?

'Harvest now, decrypt later' risk exposure and status of your migration to NIST FIPS 203/204/205.

③ Does your company comply with AI security regulation?

EU AI Act (2024/1689) for high-risk systems — documentation, human oversight, traceability.

④ Is your CRM actually protected?

Access control, backups, and sector-specific compliance if your CRM runs a regulated business (e.g. wineries with product traceability).

Self-assessment tools

① Does your company comply with data protection?

② Is your company post-quantum ready?

③ Does your company comply with AI security regulation?

④ Is your CRM actually protected?