Knowledge Base

Browse our knowledge base articles to quickly solve your issue.

Using Compliance Records

When creating a new Compliance Record, the Person or Lead field will automatically be populated, along with their Email address from the Person or Lead record. 

pasted image 0_1.png

Legal Grounds 

When creating a Compliance Record, you will need to select what you believe is the most appropriate reason for processing their personal data. 

We’ve added the six legal grounds that can be used;

  • Consent
  • Legal Obligation
  • Legitimate Interest
  • Performance of Contract
  • Public Interest
  • Vital Interest

pasted image 0 (1)_0.png

Only a single reason can be selected, so if you have multiple reasons that you can create separate Compliance Records for each. This way if one is revoked, the other may still be valid. 


The Purpose field is an unrestricted picklist and can be used to further specify what you are going to be using the personal data for. You can add to the default values in this list via Start > Configuration > Customisation > Picklists > Compliance Purpose. You can also choose to make this restricted to define particular values by unticking the Unrestricted checkbox. 

Valid From / Valid Until

These two dates are used to work out whether there is a valid Compliance record in place. It will automatically populate the Valid From date to be the date you create the record, and the Valid Until will be left blank unless you specify otherwise or use the Revoke button.

Using Consent as Legal Grounds

If you select Consent as the Legal Grounds for processing the data, you will also see three additional fields:

  • Method
  • Statement
  • Form Data

These fields should be used to record further information that support using Consent as the Legal Grounds. 

pasted image 0 (2).png

Attachments and Related Items

You can attach any further information to support your Compliance by using Notes, Activities and Files. For example, you may wish to attach a scanned copy of a letter, or may have a process which automatically takes a screenshot of the completed web form submission. 

pasted image 0 (3)_0.png

Revoking a Compliance Record

You can use the Revoke button to make that Compliance record no longer valid. This will insert a date into the Valid Until field.

pasted image 0 (4)_0.png

Revoking a Compliance Record may not mean that the Person & Lead is no longer compliant, if a Person has given Consent and Legitimate Interest to store their details, then later on were to revoke their Consent, providing that the Legitimate Interest compliance had not expired, the Record would still register as GDPR Compliant.

Note: Once the record has been saved, it will become read only, and will not be able to be changed. You will need to create a new Compliance Record to override any previous ones.