Joint-controller arrangement workpaper

What does the joint-controller arrangement workpaper produce?

Prepare responsibility allocation and an arrangement working draft for the exact joint controllers and activity.

Use the exact local files and task-specific inputs listed below. Preparation and review stay in this browser. Inspect all findings before preparing the finalized pack.

What do you need before you start?

• Define your exact task, source population and method.
• Keep the unchanged original files and the selected source versions.
• Review missing, invalid and unresolved facts before preparation.

What information do you enter?

Select the actual local sources and freeze the task-specific inputs below. Keep source files and complete findings private.

• Reference. Stable internal reference for this exact privacy workpaper.
• Working pack version. Customer document version.
• Organization. Actual organization owning the selected cases.
• Your jurisdiction. Jurisdiction and entity scope approved for this pack. Each case retains its own operative jurisdiction.
• Responsible reviewer. Customer-authorized reviewer for the selected decision method.
• Review timestamp. Exact timestamp with seconds and confirmed UTC offset.
• Approved privacy scope. Entities, activities, data, rules, populations, exclusions and uncertainty.
• Scope approval reference. Customer approval for the included cases.
• Approved preparation method. Your exact method version.
• Method source reference. Actual local file containing the approved method.
• Approved method source locator. Exact source location supporting the selected method.
• Method approver. Customer-authorized approver.
• Method approval timestamp. Exact approved instant no later than review.
• Privacy population. Selected cases or a declared complete supplied population.
• Declared case count. Required for your declared complete case population.
• Joint-controller allocation and arrangement draft case inputs. Readable typed rows with exact case IDs, operative rules, original sources and approvals.
• Parties. Readable typed rows with exact case IDs, operative rules, original sources and approvals.
• Activities. Readable typed rows with exact case IDs, operative rules, original sources and approvals.
• Allocations. Readable typed rows with exact case IDs, operative rules, original sources and approvals.
• Decisions. Readable typed rows with exact case IDs, operative rules, original sources and approvals.
• Evidence. Readable typed rows with exact case IDs, operative rules, original sources and approvals.
• Actions. Readable typed rows with exact case IDs, operative rules, original sources and approvals.

What you can download

Every result must identify its supplied facts, assumptions and unresolved items.

Fictional review report (PDF). Editable review (DOCX). Complete fictional pack (ZIP). Requires tailoring and responsible review. Samples use the finalized renderer.

How does the joint-controller arrangement workpaper work?

1. 1
   Define the approved scope

   Reference. Stable internal reference for this exact privacy workpaper.

2. 2
   Enter task-specific evidence

   Join source-supported controller parties and processing activities to named responsibilities, accountable owners, collaboration, contact points and public essence references. Detect omissions, conflicting allocations and parties outside scope. Assemble exact responsibility wording for customer legal review.

3. 3
   Inspect complete findings

   Review all named calculations, original source bindings and unresolved findings.

4. 4
   Keep recoverable work

   Exact source bytes and draft strings save locally. Strict restore checks tool identity, typed structure, file hashes and history before replacing current work. Prior checkpoints and generic drafts remain downloadable.

5. 5
   Prepare the finalized pack

   Prepare 7 plus selected attachments complete files, then download them free. Review the fictional sample below.

Method and sources

Apply the steps above to the supported inputs. Use the listed source sections to review the rule basis, assumptions and limits.

• Controller and processor guidelinesSupports the named preparation structure. Actual operative versions, source facts and responsible scope decisions remain selected by you. Guidelines describe factual controller and processor roles, joint participation and transparent allocation of responsibilities. Imported non-US instruments require separately approved scope and operative versions.EDPB. Reviewed 2026-10-09.

Common questions

What still needs review?

This customer-prepared control pack retains exact source facts, operative rules, instrument text, responsible decisions and actual execution evidence. It does not determine legal applicability, approve a transfer, authenticate consent, execute deletion, sanitize media or make a filing. Imported non-US instruments require explicit customer approval. Exact originals stay browser-local. Original files are not saved to the cloud.

At most 500 rows and 200000 characters per table, 20 files, 10 MB each and 25 MB total. Input metadata is bounded to 900 KB. Complete result metadata is bounded to 8 MB. Exact JSON source comparisons support originals up to 1 MB.

Formal tables use bounded previews. Complete approved draft text and protected imported wording appear in the reports and remain exact in Excel/JSON. Text passages and protected instruments support UTF-8 .txt originals up to 128 KB.

Related working records

The related workspace contains working administrative records. Open it for the related administrative task.

Related tools

Browse all privacy and data rights tools.

• Processing annex assemblerPopulate purposes, categories, security measures and subprocessors. Try a free example. Review your inputs and result. No account or payment required.
• Subprocessor register and change workflowTrack providers, notices, objections and approvals. Try a free example, then review your inputs and the result. No account or payment required.
• SCC annex assemblerPopulate fields without rewriting protected standard wording. Try a free example. Review your inputs and result. No account or payment required.
• Transfer impact assessment preparationAssemble transfer facts, sources, safeguards and unresolved issues. Try a free example. Review your inputs and result. No account or payment required.
• Transfer route mapperShow exporters, importers, onward recipients and hosting locations. Try a free example. Review your inputs and result. No account or payment required.