GDPR compliance for a small business

Obligations memo, Excel processing register, privacy notices, data-processing agreement, rights and breaches. Kit €49.

2 documents and tools for this need

From the cheapest to the most complete. One-time payment, instant download.

REACT APPBoussole : SuiviTDAH Parents7 detailed points on the page49 €

ADHD child tracking app for parents: routines, journal, history

React family-organization app for parents of children with ADHD: visual routines, observation journal, history, appointments. An organization tool : it does not replace medical advice in any way.

49 €
one-time payment
Explore →
Preview of the first page: A-D24-01_01_MEMO_RGPD_TPE_PME.pdf
Real preview49 €

GDPR kit for small businesses: processing register, notices, DPA

6 documents and 2 tooled spreadsheets for GDPR compliance in a small organisation: obligations memo, 6-sheet Excel processing register, privacy policy, article 28 processor contract, data-subject rights and breaches, 50-point check-list. Status verified on 31/07/2026.

49 €
one-time payment
Explore →

For a micro-business, compliance is not a one-off project but a documentary routine: a processing register to maintain, an up-to-date privacy policy and site notices, terms of use and sale, revenue tracking against VAT thresholds, recurring filings, an annual checklist. Without an in-house lawyer, each document taken alone is doable : it is the accumulation that wears you down. AI helps precisely there: structuring, drafting and keeping this recurring production up to date.

The Prompt System Solopreneur provides the operations and strategy workflows to frame each document: what to cover, in what format, with what review. The Claude Skills Stack brings professional writing : policies, administrative letters : and reports, whose structure transfers into a periodic compliance review. The n8n Automation Pack automates what recurs on a fixed date: filing-deadline reminders, administrative email triage, a weekly activity report.

The Bundle Chipie Complete groups the three packs to equip the whole routine, all tested, documented and bilingual FR+EN. The frame is clear: the packs prepare and organize your documents, they substitute for neither a DPO nor an accountant. Processing register, notices and filing obligations are validated with the competent professionals, based on the official texts and thresholds in force.

And for everyday AI

The 4 cross-cutting packs (Claude skills, prompts, n8n workflows) also apply to this niche:

Frequently asked questions

Must a small business keep a processing register?
In practice yes: the under-250-employee exemption does not apply to regular processing (customers, staff). It is the first document the CNIL asks for.
Is the CNIL register template enough?
Often yes. You then need privacy notices, a data-processing agreement with each provider and a breach procedure. The Chipie Studio kit provides them consistently for €49.
Does a small business need a DPO?
Rarely: mandatory for public bodies and large-scale monitoring or sensitive data. An internal referent remains good practice.
What to do after a data breach?
Assess the risk and, if present, notify the CNIL within 72 hours; inform individuals if the risk is high; log the incident.
Which retention periods apply?
Common benchmarks: customer data during the relationship then up to five years, accounting documents ten years, unsuccessful applications two years, prospects three years.

The packs are productivity tools: they are not legal or tax advice and guarantee no compliance. Your GDPR compliance and VAT obligations must be validated by a professional (DPO, lawyer, accountant) based on the official texts in force.

← Full catalogue