This model allows you to manage very easily the register of data controllers, the register of personal data breach notifications notified to the CNIL, as well as the subcontractor register, which is less well known but also mandatory. Very simple to set up, it is the inventory of all the processing operations implemented that is less so. It is not a question of listing all the computer applications used in your organization, even if it helps you in this task.