Subject requests answered inside thirty days, provably.
Compliance · Full PHI · Every specialtyGDPR and UK GDPR operations: data-subject access requests, erasure with its lawful exceptions stated, portability exports in machine-readable form, lawful-basis records per processing purpose, and DPIAs for new features — each with the clock visible and the response evidenced.
It does not erase what the law requires kept — a refused erasure states the retention rule it stands on.
Every app page carries this section. A listing with only benefits is an advertisement.GDPRDesk reads consents, audit log, patient record and writes DSAR cases, erasure decisions, portability exports. Its data class is Full PHI. Every app works on the same patient record — nothing is copied into a silo.
It does not erase what the law requires kept — a refused erasure states the retention rule it stands on.
Every record stays; only the workflow leaves.
GDPRDesk is in design: the surface exists and the platform underneath is ready. Join the waitlist and it moves up the build order.
Tell us what you run and we will show you this app inside a practice shaped like yours — or answer the question the page above did not.