Metasoul business general

The “Task management” module displays all open tasks created by Metasoul based on previous entries and upcoming recurring tasks. It is also possible to create custom tasks to receive reminders for privacy-related activities. For each task, the status can be updated, an individual target date for completion can be set, and the priority can be adjusted according to assessment. The priority suggested by Metasoul serves as a guideline for a sensible order of completion without imposing mandatory urgency.

The “Data privacy assistant” module provides an overview of the services and processes used within the company that involve the processing of personal data. It also allows new documents to be created and provides quick access to relevant records. After completing the company profile, the assistant suggests additional questionnaires and automatically generates the majority of privacy-relevant content along with the associated open tasks. Note: When using the privacy generator exclusively, the company profile is not available, and the Data privacy assistant does not offer a company profile function.

The “Apps & Cloud Services” module provides a list of all tools and services used within the company and assigns them to the respective providers.

The “Service Providers” module documents all service providers potentially involved in the processing of personal data within the company. The entries form the basis for the Record of Processing Activities. Providers of tools managed in the “Apps & Cloud Services” module are automatically recorded and added to the service providers module.

This module documents all customers for whom personal data is processed on behalf. The recorded entries serve as a basis for use in the Record of Processing Activities.

The Record of Processing Activities (RoPA) is a mandatory documentation listing all activities involving the processing of personal data. The “Record of Processing Activities” module in Metasoul supports the creation of a proper documentation

When processing personal data, technical and organizational measures (TOMs) must be defined and documented to ensure an appropriate level of protection. The Metasoul TOM module supports the definition of suitable measures and the identification of potential improvements.

Whenever third parties are involved in processes that handle personal data, a Data Processing Agreement (AVV) is required. This agreement defines the conditions for processing personal data on behalf of the controller. The Metasoul AVV module supports the creation and management of these agreements.

Privacy notices inform data subjects about the processing of their personal data and are legally required whenever personal data is processed. To create a new privacy notice, a suitable questionnaire in the Data privacy assistant must first be completed. The Metasoul “Privacy Notices” module allows generated privacy notices to be managed, edited, and provided in various formats, for example as PDF or for embedding via JavaScript or iFrame on a website or in an application.

Metasoul also allows the generation of documents that are not directly related to data protection topics but may be relevant for any company. In addition to an Imprint for a website, the creation of confidentiality agreements, general terms and conditions, or internal policies is planned. As with privacy notices, these “other documents” can be easily shared and embedded on websites or in applications via iFrame or JavaScript.

In cooperation with the “2b-aware” training platform, employee trainings on data protection topics are currently offered. The “Employee Trainings” module is currently in the testing phase and is not yet an official part of Metasoul. A Metasoul Business subscription licenses ten employees, and additional licenses can be obtained directly through 2b-aware.

Metasoul already covers the main data protection topics; however, further obligations remain that must currently be fulfilled by the data controller. These obligations include at least:

• Conducting and documenting data protection impact assessments where required

• Conducting and documenting data transfer impact assessments where required

• Managing consents (Consent Management)

• Handling data subject requests

• Appointing a data protection officer (DSB) if applicable

Work is underway to offer most of these obligations through Metasoul in 2026. For questions regarding any of these topics, contact info@metasoul.com.

All completed questionnaires are automatically transferred when upgrading from the Metasoul privacy notice generator subscription to Metasoul Business, and additional content included in the Metasoul Business subscription is generated.