1. Decide the legal shape
- Confirm controller / processor roles for the pilot.
- Identify whether any Article 29 cross-border route is in scope.
- Map the pilot to a legal basis and subject-rights response path.
Compliance packet
For the DPO, legal team, or compliance officer.
Use this path to decide whether a scoped pilot is acceptable under your PDPL posture. It starts with role allocation, transfer posture, subject-rights handling, and the evidence you can review today.
2. Review the artifacts
- Customer Evaluation Guide for the step-by-step review flow.
- DPA and SCC templates for context, not final customer-specific legal advice.
- Compliance reviewer pack for control-level mapping.
3. Check the boundary
NDGP LR-25-000018 is registered, not licensed. SDAIA AE-26-000237 is accreditation in progress, not awarded. External counsel sign-off and the provider SCC/DPA/TIA package are not yet complete.
Pilot keys and self-serve trial flow remain operator-approved. Do not use live customer personal data until the pilot scope, tenant policy, and transfer posture are agreed in writing.