Dokuflex Data Privacy Management - 2026 Pricing, Features, Reviews & Alternatives

Under Spain's LOPDGDD the controller must prove it answered on time. Dokuflex runs privacy requests and breaches as a process.

One case file, two panels: each RGPD-{seq} case is a rights request or a data breach, with a non-editable date of receipt. The rights panel holds the right exercised, channel, one-month deadline (extendable by two), requester, identity verified and extension reasons. The breach panel holds detection and occurrence dates, type, origin, data categories, people affected, risk level, AEPD notification, communication to data subjects and measures.

17 rules: panels follow the case type; key fields become mandatory; extensions need a reason; AEPD notification needs its date; high risk sets notification and communication to yes; refusal needs a reason and resolution needs the response.

Workflow: 'Start processing' sends an email acknowledgement of receipt and opens the resolve or refuse step; status and response date update automatically, and every step is logged.

Follow-up: counters, a grid with deadline and DPO, Excel export, kanban and a six-chart dashboard. Six sample cases and three guided tours included.

Scope: the module records that the AEPD was notified; it does not submit the notification or decide outcomes. Record of processing activities, processor agreement and consent templates sit in the same catalogue. EU-hosted, role-based access. Platform plans from €25 per user per month; 14-day free trial.