Do we legally need a data map?

In Israel a database definition document is expected, and in the EU most businesses need a record of processing. Both start from the same list of systems and data types.

Does our data leave the browser?

No. Everything you type stays in this browser until you export it yourself as CSV, XLSX or JSON.

How long does a first pass take?

About fifteen minutes for a small business. Start from payroll, email and your CRM - that usually covers most of the personal data you hold.

All resources

The compliance keystone

Personal-Data Map Template

Every lawyer tells owners to map their data; nobody shows them how. This builder is the how - fill it in on screen and export your map when you are done.

Template 15 min

Who it's for: Any business asked for a database definition document or a record of processing.
Format: Template
Time needed: 15 min
Topic: Privacy · IL · EU
What you end up with: An exported data map you can hand to a lawyer or an insurer.

What's inside

Guided builder for systems, data types and vendors
Pre-filled examples from real small businesses
Export to CSV, XLSX or JSON when you're done

What you'll walk away with

from empty screen to a usable map: 15 minfrom empty screen to a usable map
regimes covered: Amendment 13 and GDPR: 2regimes covered: Amendment 13 and GDPR
data leaves your browser: 0data leaves your browser

GDPR · Amendment 13 · NIS2 · SOC 2

What personal info does your business handle?

A data map is simply a list of every way your business uses people's personal information - your customer list, payroll, your newsletter, each one is an "activity". We ask plain questions about each; the map and the paperwork build themselves.

1List each way you use personal data
2Answer a few guided questions
3Export your map: Excel, PDF, JSON

~15 min, no signup
Stays in your browser only
Export CSV · PDF · JSON

Starts in plain-language mode - switch to Detailed (GDPR/Amendment 13) or Professional (SOC 2) at any time.

Preview - what your map will look like

Your answers are stored only in this browser - nothing is ever uploaded. Clear them any time with "Delete map" inside the tool.

How a map gets built

Relative effort per stage

List the systems you actually use5 min
Mark what personal data sits in each6 min
Name the vendor and where it is hosted3 min
Export and file it1 min

General guidance, not legal advice. Privacy and cybersecurity regulation (Amendment 13 / GDPR / NIS2) continues to evolve through 2026 - confirm specifics with a privacy lawyer.