Central LGPD

It is the shelf of living data protection documents: each one with its state (in force or under review), date and version. A document that describes the past is worse than no document at all — that is why each card says WHEN the information is from. The operational screens (DPO/ROPA, data subject rights, portability and retention) are one click away.

The living data protection documents, with state and date: the DPA (processing agreement), the RIPD (impact report), the incident runbook and the AI compliance — plus shortcuts to the operational screens (DPO/ROPA, data subject rights, portability and retention). — this is the role of the "LGPD Center" screen within the platform.

The Data Processing Agreement (DPA) has §5 — the named list of subprocessors — approved and in force; the other clauses await a lawyer's review. The Central shows exactly that, instead of pretending to have a finished document: an honest state is worth more than a pretty stamp.

Each document in the center — the DPA (processing agreement), the RIPD (impact report), the incident runbook and the AI compliance — appears with its state and the corresponding date. It is this pair that answers "is it up to date?" without opening the document: an item with an old date or a pending state is the next one to review. Treat the center as a data protection maintenance panel, not as a dead archive.

Whoever accepted a proposal on behalf of the customer (name, CPF or CNPJ and network address) is kept as proof of the contract until 5 years after it ends — a contract with no end date stays kept. Once a month, a routine looks for acceptances past that period in all accounts and erases name, document and network address, together with the signer the acceptance recorded in the contract. The acceptance date stays, and each erased acceptance gets a line in the proposal’s audit trail saying the retention period ended. The data subject’s request still erases it at any time after the retention period.

The cards bring the executive summary. The full copy of the DPIA (RIPD), the incident runbook and the AI compliance is available on request to the Data Protection Officer — the contact is in LGPD ▸ Management and in the Privacy Policy.

Whoever administers the account and the profiles that already see LGPD ▸ Management. Granting it to other profiles is the administrator's decision, in Settings ▸ Access.

The center concentrates the documents and points to the operation: the shortcuts lead to the Data Protection Officer and the ROPA (in LGPD Management), to data subject rights (export dossier and anonymize), to tenant portability and to data retention. The split is deliberate — here you answer "are the documents up to date?"; on the operational screens you carry out each obligation.