Paperwork, already half done

DPIA starter: Microsoft Purview (DSPM for AI)

from trust card 1 answers · you answer 8 left

1. What personal data does the tool process, and where?
   from trust card · maker says Activity and sensitive-information matches go to your Microsoft Purview tenant. Full prompts and responses are captured only when you turn on a collection policy with content capture.
2. Where does processing happen?
   you answer
3. Who else receives the data (sub-processors)?
   you answer
4. How long is it kept?
   you answer
5. The supplier’s role under UK GDPR
   you answer
6. Why do you need this processing?
   you answer
7. Who are the data subjects?
   you answer
8. Main risks, and what reduces them
   you answer
9. Residual risk after controls
   you answer