Trust Center
Regulatory frameworks
For each framework, REVIEWIT's position and the published document that addresses it. No commitment beyond these documents.
| Framework | REVIEWIT's position | Document |
|---|---|---|
| GDPR | Processor | Data processing agreement (DPA) template v1.2 |
| AI Act | RITA, not a high-risk system | AI transparency notice — RITA v1.0 |
| NIS 2 | Not in scope in its own right; commitments to its customers | Data processing agreement (DPA) template · Annex 5 v1.2 |
| DORA | ICT third-party service provider to financial customers | Data processing agreement (DPA) template · Annex 5 v1.2 |
| Data Act | Switching between providers | Data processing agreement (DPA) template · Annex 6 v1.2 |
| ISO 27001 | In preparation | — |
| SOC 2 | Planned | — |
Only published documents are cited. A framework without a published document announces none: the document will appear here on the day it is published.