GDPR art. 9
Health data
Diagnosis and symptoms are special categories. Templates that ask usually lack a legal basis.
Compliance module · Sick-leave follow-up
We test blank templates, manager guides and routines — never personnel cases.
01 · Why high-risk
GDPR art. 9
Diagnosis and symptoms are special categories. Templates that ask usually lack a legal basis.
WEA §4-6
The duty addresses functional capacity, not diagnosis. The conversation must focus on what the employee can do, not what is wrong.
GDPR art. 5
Follow-up plans are stored too long, in the wrong place and with too broad access. We test deletion, ownership and access.
Internal Control · WEA §3-1
Sick leave must be handled as a system. Lack of systematic work and documented follow-up is the most common audit finding.
02 · Control points
Excerpt. Full library ships with Policy report (L2) and Continuous compliance (L3).
03 · How it works
You tell us what kind of document you're testing.
You confirm on upload that the document is a governance document with no personal data. As an additional safeguard an automatic GDPR Pre-scan runs; if something looks like an individual case, the document is rejected and deleted without being analysed.
Policy is scored against relevant control points. You get a main finding and a recommended next step.
A free Policy check takes under five minutes.
Free · one governance document · no access code, just an account