Skip to content
NoSqlStudio
Documentation

Compliance Reports

Generate LGPD / GDPR compliance reports in 1 click — ROPA, DPIA, Breach Notification. PDF export rendered offscreen, with optional Ed25519 sidecar signature for forensic chain of custody.

What it is

A workspace tab with 3 templates aligned to LGPD: ROPA (Records of Processing Activities — Art. 37), DPIA (Data Protection Impact Assessment — Art. 38) and Breach Notification (Art. 48). You fill the form, the engine renders printable HTML and exports PDF via Electron offscreen BrowserWindow.printToPDF. The legal labels stay in English inside the template by design — pick the locale at the top of the form for the rendered output language.

When to use

Run before a routine DPO submission, after an incident that triggers an ANPD breach notification, or as evidence for an annual GDPR audit. The PDF you generate is structured to be filed directly — no re-formatting.

How to open

  1. In the NoSqlStudio desktop app, open the Tools menu → Compliance, or press Ctrl+Alt+Shift+Z.
  2. A workspace tab opens with the 3 templates in a sidebar on the left.
  3. Pick a template, fill the form on the center column, the right column previews the HTML in real time.

Filling a report

  1. Pick the template (ROPA / DPIA / Breach). Each one has its own set of mandatory fields aligned to the corresponding LGPD article.
  2. Pick the output locale (pt-BR / en / es). Form labels stay in English regardless — only the rendered document switches language.
  3. Complete every field. The engine warns inline when a mandatory field is missing — the export button stays disabled until the draft is valid.
  4. Click "Export PDF" to render the printable PDF directly to disk, or "Export HTML" if you need to hand the file to a designer.
  5. If your tier includes Ed25519 sign, the engine also writes a .sig sidecar with the document SHA-256, the signing public key, and the signature. Hand the sidecar alongside the PDF for forensic chain of custody.

Templates

  • ROPA — Records of Processing Activities (LGPD Art. 37) — lists every personal-data processing operation, lawful basis, retention period, recipients.
  • DPIA — Data Protection Impact Assessment (LGPD Art. 38) — risk assessment for high-impact processing.
  • Breach Notification (LGPD Art. 48) — the document you send to ANPD within 72 hours of a confirmed personal-data breach.

Limitations (v1)

  • Form labels stay in English inside the JSX template because legal terminology requires human translation per jurisdiction. The exported document switches language; the form does not.
  • PDF is rendered offscreen — requires a working Electron BrowserWindow. In test environments without a display you can fall back to "Export HTML" + your own headless PDF tool.
  • Ed25519 sidecar requires a tier that ships the signing key. On lower tiers the export still works, just without the cryptographic signature.