Skip to main content
GDPR Article 30 requires data controllers to maintain a Record of Processing Activities (ROPA) that documents what personal data you process, why, and for how long. FlexOrch generates this record automatically from your actual pipeline executions — no manual spreadsheets required.

​
Get the ROPA record

Send a GET request to the compliance record endpoint. FlexOrch builds the response from your pipeline history, PII categories detected, and the retention period configured on your account. 
curl https://api.flexorch.com/v1/compliance/record \
  -H "X-API-KEY: dfx_your_key_here"
Response: 
{
  "data": {
    "controller": "your-company@example.com",
    "processing_activities": [
      {
        "category": "document_processing",
        "data_subjects": ["employees", "customers", "vendors"],
        "data_categories": ["identification", "financial", "contact"],
        "retention_period": "30 days",
        "technical_measures": ["pseudonymization", "encryption_at_rest"]
      }
    ],
    "generated_at": "2024-01-15T10:00:00Z"
  }
}
The record reflects your actual pipeline activity — document types processed, PII categories detected, and the retention settings on your account. If you change your retention period or process new document types, re-fetch the record to get an up-to-date snapshot.

​
Response fields

FieldDescription
controllerThe account email registered as the data controller.
processing_activities[].categoryThe type of processing activity performed.
processing_activities[].data_subjectsCategories of individuals whose data was processed.
processing_activities[].data_categoriesPII categories detected across your pipeline runs.
processing_activities[].retention_periodHow long documents are retained under your current plan.
processing_activities[].technical_measuresSafeguards applied, such as pseudonymization and encryption.
generated_atISO 8601 timestamp for when this record was generated.

​
Export as PDF

PDF export of the ROPA record is coming soon and will be available for Enterprise plans. In the meantime, you can serialize the JSON response and generate a PDF using your own tooling.