TOTO-REX   /   FOUNDER’S FIRST AI LITERACY FOLDER

AI compliance from idea to exit

Gèilleadh nuair a thathar a’ cleachdadh inntleachd fhuadain, bhon bheachd gu deireadh na seirbheise

Use the stage that matches your next decision. A funding round is a planning milestone. Duties can start earlier, including when the first real record enters a pilot.

Tòisich leis an ath cho-dhùnadh. Faodaidh dleastanasan èirigh mus tog thu airgead no nuair a chleachdas tu a’ chiad chlàr fìor.

Bidh a’ Bheurla fhathast ri faicinn. Tagh dàrna cànan leughaidh.

Which records need extra care?

Dè an dàta a dh’fheumas dìon a bharrachd?

A photograph and a face template used to identify someone are different. Record the Article 6 basis and, for special-category processing, the Article 9 condition. Consider health inferences, children, dependence on a carer, an unsafe address and client secrets separately. Restrict input and access, offer a human alternative and complete a required DPIA before using live records.

Dèan sgaradh eadar dealbh agus teamplaid aodainn airson neach aithneachadh gu sònraichte. Clàraich bunait Artaigil 6 agus, airson roinnean sònraichte, cumha Artaigil 9. Beachdaich air tuairmsean mu shlàinte, clann, eisimeileachd air neach-cùraim, seòladh a dh’fhaodadh duine a chur ann an cunnart, agus rùintean luchd-dèiligidh. Cuingich cothrom, tairg cuideachadh bho dhuine agus dèan measadh buaidh riatanach mus cleachd thu fìor dhàta.

12 detailed data decisions (EN) · ICO-SPECIAL · EU-GDPR

If a breach happens

Ma thachras briseadh tèarainteachd dàta pearsanta

Stop the disclosure, preserve restricted evidence and record awareness time. A processor tells the controller without undue delay. A controller notifies the competent authority without undue delay and, where feasible, within 72 hours of awareness unless risk to people’s rights and freedoms is unlikely. If high risk is likely, tell people without undue delay, subject to Article 34 exceptions. Record every personal data breach and the reasons for each decision.

Cuir stad air a’ chron, glèidh fianais agus clàraich cuin a fhuair thu fios. Innsidh am pròiseasaiche don rianadair gun dàil gun adhbhar. Innsidh an rianadair don ùghdarras iomchaidh gun dàil gun adhbhar agus, ma ghabhas e dèanamh, taobh a-staigh 72 uair on àm a fhuair e fios, mura h-eil cunnart do chòraichean is saorsaidhean dhaoine buailteach èirigh. Ma tha cunnart àrd buailteach èirigh, innis do na daoine gun dàil gun adhbhar, le ùmhlachd do dh’eisgeachdan Artaigil 34. Clàraich gach briseadh agus adhbhar nan co-dhùnaidhean.

Full incident playbook and messages (EN) · ICO-REPORT · EDPB-DOORS

01 · Pre-seed · Define the use

Ron chiad tasgadh · am beachd

A useful idea can hide an unacceptable use. The founder names the decision, affected people and forbidden uses. Hold a live trial until a possible prohibition has been resolved.

Ainmich an co-dhùnadh, na daoine air an toir e buaidh agus cleachdaidhean toirmisgte. Cuir deuchainn le daoine air dàil ma tha casg fhathast fo cheist.

Fianais no freagairt

One-page use case and manual alternative

Geàrr-chunntas agus dòigh gun AI

Nòtaichean air na tùsan / practical checks

Walk through a single item from input to output. Which person can be affected, what could they lose, and who can change the outcome?

Lean aon nì bhon chur-a-steach chun an toraidh. Cò air am faodadh e buaidh a thoirt, dè dh’fhaodadh an duine sin a chall, agus cò as urrainn am buil atharrachadh?

EU AI Act: do we build or market the system under our name, deploy it for work, or change its purpose? Check territorial scope, including where an output is used. Keep the reason for each role.

Fo Achd AI an AE, an tog sinn no am margaich sinn an siostam fon ainm againn fhèin, an cleachd sinn e airson obair, no an atharraich sinn a rùn? Thoir sùil air an raon tìreil, a’ gabhail a-steach far an cleachdar toradh. Cùm an t-adhbhar airson gach dreuchd.

Screen prohibited practices before testing with people. For example, workplace emotion inference has a narrow medical or safety exception. Escalate any possible prohibition before further use.

Thoir sùil airson cleachdaidhean toirmisgte mus dèanar deuchainn le daoine. Mar eisimpleir, tha eisgeachd chumhang ann airson adhbhar meidigeach no sàbhailteachd a thaobh a bhith a’ tighinn gu co-dhùnadh mu fhaireachdainnean dhaoine san àite-obrach. Cuir toirmeasg sam bith a dh’fhaodadh a bhith ann gu neach cunntachail mus leanar air a’ chleachdadh.

EU-SCOPE · EU-PROHIB

02 · Formation and seed funding

Stèidheachadh na companaidh

The company may not control code, data or designs made before incorporation. Trace each contribution and secure suitable rights before promising ownership to investors.

Lorg cò rinn gach pìos obrach. Faigh na còraichean iomchaidh mus geall thu sealbh do luchd-tasgaidh.

Fianais no freagairt

Contributor and rights schedule with signed evidence

Liosta de luchd-tabhartais agus aontaidhean

Nòtaichean air na tùsan / practical checks

Working alone? Wear several hats and record which one you used. Get a qualified second view for unfamiliar or serious decisions. With 2–10 people, separate the maker from the checker. With 11–50, name leads and deputies. These are suggested working arrangements.

Ag obair leat fhèin? Gabh grunn dhleastanasan agus clàraich dè an dreuchd a bha agad aig gach ceum. Faigh dàrna beachd bho neach le teisteanas airson co-dhùnaidhean air nach eil thu eòlach no aig a bheil droch bhuaidh a dh’fhaodadh a bhith ann. Le 2–10 daoine, cùm an neach a nì an obair air leth bhon neach a nì an sgrùdadh. Le 11–50, ainmich ceannardan agus riochdairean nan àite. Seo rèiteachaidhean obrach a thathar a’ moladh.

Compare doing nothing, a manual process and an AI-assisted process. Estimate time saved after checking, cost of errors, supplier fees and exit costs.

Dèan coimeas eadar gun dad a dhèanamh, pròiseas le làimh agus pròiseas le taic AI. Dèan tuairmse air an ùine a shàbhailear às dèidh nan sgrùdaidhean, cosgais mhearachdan, cìsean an t-solaraiche agus cosgaisean fàgail na seirbheise.

UK-IP · UK-NSI

03 · Source data and suppliers

Dàta agus solaraichean

Permission to view material may not cover training, retrieval or customer resale. Match each use to a right and check vendor reuse, subcontractors, costs and exit before uploading real records.

Thoir sùil air cead airson trèanadh, lorg agus roinneadh fa leth. Dearbh am bi an solaraiche ag ath-chleachdadh dàta.

Fianais no freagairt

Permission matrix and signed supplier decision

Clàr cheadan agus co-dhùnadh mun t-solaraiche

Nòtaichean air na tùsan / practical checks

Trace one data item through collection, prompts, retrieval, model, output, logs, support and deletion. Name source, people, country, recipients, retention, backups and someone who can test deletion.

Lean aon nì dàta tro chruinneachadh, brosnachaidhean don mhodal, lorg dàta, am modal, toradh, logaichean, taic agus dubhadh às. Ainmich an tùs, na daoine, an dùthaich, an luchd-faighinn, an ùine glèidhidh, na lethbhreacan-glèidhidh agus cuideigin a dh’fhaodas deuchainn a dhèanamh air dubhadh às.

Supplier check: identify processors and subprocessors, training or reuse terms, support access, contract, incidents, return or deletion, change notice and exit. Save the dated terms and unresolved questions.

Sgrùdadh air an t-solaraiche: comharraich pròiseasairean agus fo-phròiseasairean, cumhachan trèanaidh no ath-chleachdaidh, cothrom aig luchd-taice, a’ chùmhnant, tachartasan, tilleadh no dubhadh às, fios mu atharrachadh agus fàgail. Sàbhail na cumhaichean leis a’ cheann-latha agus ceistean gun fhuasgladh.

Locate each restricted transfer. Record the applicable adequacy decision or safeguard, assessment and extra protections. Check EU SCCs and UK IDTA or Addendum separately. Revisit overseas support and onward transfers.

Lorg gach gluasad dàta cuibhrichte. Clàraich an co-dhùnadh iomchaidh air freagarrachd no an dìon a tha a’ buntainn, am measadh agus dìonan a bharrachd. Thoir sùil air SCCan an AE agus IDTA no Addendum na RA fa leth. Sgrùd a-rithist taic bho thall thairis agus gluasadan air adhart.

ICO-CONTRACT · EU-TRANSFER · ICO-TRANSFER · EDPB-MODEL

04 · Build and prototype

A’ togail agus a’ dèanamh deuchainn

A model can leak another customer’s records or turn a document instruction into an action. Use synthetic test cases, separate tenants, limit permissions and test a manual override before connecting live systems.

Cleachd dàta ficseanail. Feuch an gabh riaghailtean ruigsinneachd a bhriseadh ann an deuchainn shàbhailte. Dearbh gun stad an gnìomh.

Fianais no freagairt

Versioned test results, access map and rollback test

Clàr dheuchainnean agus plana tilleadh

Nòtaichean air na tùsan / practical checks

Engineering and data: freeze model, prompt, dataset and settings. Test typical, unusual and misleading inputs against an agreed baseline. Keep reproducible results and known limits.

Innleadaireachd agus dàta: cùm am modal, am brosnachadh, an seata dàta agus na roghainnean stèidhichte tron deuchainn. Feuch cuir-a-steach àbhaisteach, neo-àbhaisteach agus meallta an aghaidh bun-tomhais aontaichte. Cùm toraidhean a ghabhas ath-dhèanamh agus crìochan a tha aithnichte.

Predeclare the test: purpose, dataset origin, expected answers, baseline, sample size, thresholds, critical failures, reviewer and retest date. Include language, disability and real operating conditions where relevant.

Sònraich an deuchainn ro-làimh: rùn, tùs an t-seata dàta, freagairtean ris a bheil dùil, bun-tomhas, meud an t-sampaill, stairsneachan, fàilligidhean èiginneach, neach-sgrùdaidh agus ceann-latha ath-dheuchainn. Gabh a-steach cànan, ciorram agus fìor chumhachan obrachaidh far a bheil sin buntainneach.

Security drill: send a harmless hostile instruction in a fictional attachment. Test a blocked export, denied permission, wrong recipient and unavailable supplier. Record what happened at each boundary.

Eacarsaich tèarainteachd: cuir stiùireadh nàimhdeil gun chron ann an ceanglachan ficseanail. Feuch às-phortadh air a bhacadh, cead air a dhiùltadh, neach-faighinn ceàrr agus solaraiche nach eil ri fhaighinn. Clàraich dè thachair aig gach crìoch.

NCSC · EU-GDPR

05 · Pilot with real users

Deuchainn le daoine

A free or closed pilot can still harm a person. Screen before real data, set limits and enable meaningful review. Hold high-risk processing if a required impact assessment or prior consultation is incomplete.

Sgrùd cunnart mus cleachd thu clàran fìor. Crìochnaich measadh buaidh ma tha feum laghail air, agus thoir cothrom air ath-sgrùdadh le duine.

Fianais no freagairt

Pilot protocol, DPIA decision and stop criteria

Plana agus cumhaichean stad

Nòtaichean air na tùsan / practical checks

A DPIA examines how processing personal data could harm people and how to reduce that harm. The controller must do it before likely high-risk processing begins, including a pilot using real personal data.

Bidh DPIA a’ sgrùdadh mar a dh’fhaodadh pròiseasadh dàta pearsanta cron a dhèanamh air daoine agus mar a lughdaichear an cron sin. Feumaidh an rianadair a dhèanamh mus tòisich pròiseasadh a bhios buailteach do chunnart àrd, a’ gabhail a-steach deuchainn phìleat le fìor dhàta pearsanta.

Seek the data protection officer’s advice where designated. Where appropriate seek affected people’s views. Record objections, accessibility needs, decisions and reasons for any justified departure.

Iarr comhairle bhon oifigear dìon dàta ma chaidh fear ainmeachadh. Far a bheil sin iomchaidh, iarr beachdan nan daoine air an toirear buaidh. Clàraich gearanan an aghaidh a’ mholaidh, feumalachdan ruigsinneachd, co-dhùnaidhean agus adhbharan airson claonadh sam bith bhon chomhairle aig a bheil bonn math.

Decide whether high risk remains despite practical measures. If so, consult the competent authority before starting the processing under Article 36. Record correspondence and response. A founder’s signature cannot replace consultation.

Co-dhùin a bheil cunnart àrd fhathast ann a dh’aindeoin nan ceumannan practaigeach. Ma tha, bruidhinn ris an ùghdarras chomasach fo Artaigil 36 mus tòisich am pròiseasadh. Clàraich a’ chonaltradh agus an fhreagairt. Chan urrainn do shoidhneadh stèidheadair àite a’ cho-chomhairleachaidh a ghabhail.

Check human oversight: can the reviewer see the evidence, disagree, correct the result and stop the next action in time? Save one override trace. A second click alone proves little.

Thoir sùil air stiùireadh daonna: an urrainn don neach-sgrùdaidh an fhianais fhaicinn, eas-aontachadh, an toradh a cheartachadh agus stad a chur air an ath ghnìomh ann an àm? Cùm aon chlàr a sheallas mar a chaidh toradh a chur gu taobh. Chan eil dàrna cliog leis fhèin a’ dearbhadh mòran.

ICO-DPIA · EU-GDPR · UK-GDPR

06 · Pre-launch · Decide whether to ship

Ron chur air bhog

A polished demo can outrun the evidence. Test the exact public claim, check applicable disclosures and sector approvals, and name the person who can withhold release.

Ceangail gach tagradh reic ri fianais. Sgrùd fiosan do dhaoine agus ceadan na roinne.

Fianais no freagairt

Claims-to-evidence table and dated release decision

Co-dhùnadh le ceann-latha

Nòtaichean air na tùsan / practical checks

Check Article 50 by actor and output. Telling people they interact with AI, machine-readable marking and disclosing a deepfake are different duties with exceptions. Record which applies and the release-date evidence.

Thoir sùil air Artaigil 50 a rèir na dreuchd agus an toraidh. Is diofar dhleastanasan, le eisgeachdan, a th’ ann a bhith ag innse do dhaoine gu bheil iad ag eadar-obrachadh le AI, a bhith a’ cur comharra a ghabhas leughadh le inneal air toradh, agus a bhith a’ nochdadh gur e ìomhaigh, fuaim no bhidio fuadain a tha a’ gabhail coltas rudeigin fìor (deepfake) a th’ ann an susbaint. Clàraich dè tha a’ buntainn agus an fhianais aig àm an fhoillseachaidh.

Marketing, design and sales: substantiate claims, clear assets and check required disclosures. Save approved wording and versions. Escalate promises of exclusivity, ownership or guaranteed accuracy.

Margaidheachd, dealbhadh agus reic: cuir fianais ri tagraidhean, faigh ceadan airson stuthan agus thoir sùil air foillseachaidhean a tha riatanach. Sàbhail am briathrachas agus na tionndaidhean aontaichte. Iarr sgrùdadh air geallaidhean mu chòraichean toirmeasgach, seilbh no barantas cruinneis.

Release options: approve within stated limits, approve with controls already in force, hold pending evidence, or stop. Name unresolved issues, lawful scope, approver, effective date, expiry and rollback owner.

Roghainnean airson cur an gnìomh: aontaich taobh a-staigh chrìochan ainmichte, aontaich le smachdan a tha ag obair mar-thà, cùm air ais fhad ’s a thathar a’ feitheamh ri fianais, no stad. Ainmich cùisean gun rèiteachadh, raon ceadaichte fon lagh, neach-aonta, ceann-latha èifeachdach, ceann-latha crìochnachaidh agus cò a thilleas chun an tionndaidh roimhe.

UK-ADS · EU-MARK · EU-AIA

07 · Launch and operate

Cur air bhog agus obrachadh

Complaints and changes in performance can reveal harm missed in testing. Give users a human route, test it, monitor errors by type and contain incidents promptly.

Cum sùil air mearachdan agus gearanan. Ainmich neach airson tachartasan agus tairg slighe gu duine.

Fianais no freagairt

Monitoring log, incident owner and response record

Clàr sgrùdaidh agus freagairt

Nòtaichean air na tùsan / practical checks

After release: name an owner for errors, complaints, overrides, drift, security and costs. Specify sample, frequency, stop threshold and who can disable the workflow. Log changes and reapprove material ones.

Às dèidh cur an gnìomh: ainmich neach cunntachail airson mhearachdan, ghearanan, cho-dhùnaidhean a thèid a thionndadh air ais, gluasad mean air mhean bhon bhun-tomhas, tèarainteachd agus chosgaisean. Sònraich sampall, tricead, stairsneach airson stad agus cò as urrainn am pròiseas a chur à comas. Clàraich atharrachaidhean agus faigh aonta às ùr do dh’atharrachaidhean cudromach.

Incident: stop unsafe actions, preserve restricted evidence, assess people affected, activate the manual route and record notification decisions. Test a clean restore and correction before reopening.

Tachartas: stad gnìomhan cunnartach, dìon fianais le inntrigeadh cuibhrichte, meas a’ bhuaidh air daoine, cuir an dòigh làimhe an gnìomh agus clàraich co-dhùnaidhean mu fhiosan. Feuch aisig ghlan agus ceartachadh mus tòisichear a-rithist.

For UK/EU personal-data breaches, controllers notify the regulator unless risk to people’s rights is unlikely. Notify without undue delay and where feasible within 72 hours of awareness. If high risk is likely, tell people without undue delay, subject to Article 34 exceptions. Processors notify controllers without undue delay.

Ma bhristear tèarainteachd dàta pearsanta san RA no san AE, ’s e an riaghailt gum feum rianadairean fios a chur chun an riaghladair. Tha eisgeachd ann ma tha e eu-coltach gun adhbhraich am briseadh cunnart do chòraichean dhaoine. Thoir fios gun dàil mhì-iomchaidh agus, far a bheil sin comasach, taobh a-staigh 72 uair on a dh’fhàs thu mothachail air. Ma tha cunnart àrd dualtach, innis dha na daoine gun dàil mhì-iomchaidh, fo ùmhlachd eisgeachdan Artaigil 34. Cuiridh pròiseasairean fios gu rianadairean gun dàil mhì-iomchaidh.

Intake: keep a secure reference to the original words. Record first receipt, controller, jurisdiction, each right, owner, safe reply channel and accessibility or representative needs.

Nuair a gheibhear an t-iarrtas, cùm iomradh tèarainte air na dearbh fhaclan tùsail. Clàraich cuin a fhuaireadh e an toiseach, an rianadair, an t-uachdranas, gach còir, an neach cunntachail, slighe shàbhailte airson freagairt agus feumalachdan ruigsinneachd no riochdachaidh.

ICO-BGUIDE · EDPB-BREACH

08 · Scale or change the product

Fàs agus atharrachadh

A new market, model, customer group or automated action can change the risk and legal role. Reassess the changed scope before switching it on.

Dèan measadh ùr air modail, margaidh, buidheann no gnìomh ùr. Dèan deuchainn mus aontaich thu ris.

Fianais no freagairt

Market and change register with fresh approval

Clàr atharrachaidhean

Nòtaichean air na tùsan / practical checks

Check the intended purpose against Annexes I and III. Recruitment screening is a listed example. Document any claimed Article 6(3) exception and its conditions. Profiling people rules out that exception.

Dèan coimeas eadar an rùn a thathar a’ sùileachadh agus Leas-phàipearan I agus III. Tha sgrìonadh thagraichean airson fastadh air an liosta. Clàraich eisgeachd sam bith a tha thu ag agairt fo Artaigil 6(3) agus na cumhaichean aice. Chan fhaodar an eisgeachd sin a chleachdadh ma thathar a’ dèanamh pròifileadh air daoine.

The revised dates for Chapter III sections 1–3, except Article 6(5), are 2 December 2027 for Annex III systems and 2 August 2028 for Annex I systems. Other provisions have their own dates.

Is iad na cinn-latha atharraichte airson earrannan 1–3 de Chaibideil III, ach a-mhàin Artaigil 6(5), 2 Dùbhlachd 2027 airson siostaman Leas-phàipear III agus 2 Lùnastal 2028 airson siostaman Leas-phàipear I. Tha cinn-latha fa leth aig ullachaidhean eile.

UK significant solely automated decisions require an Articles 22A–22D review, including restrictions on special-category data and the recognised legitimate interests basis. In the EU start with Article 22 and its specific exceptions. Test real human power to reconsider.

Airson co-dhùnaidhean cudromach san RA a tha gu tur fèin-obrachail, thoir sùil air Artaigilean 22A–22D, a’ gabhail a-steach bacaidhean air dàta roinnean sònraichte agus air bunait nan ùidhean dligheach aithnichte. San AE, tòisich le Artaigil 22 agus na h-eisgeachdan sònraichte aige. Dèan deuchainn air a’ chumhachd dha-rìribh aig duine co-dhùnadh ath-sgrùdadh.

EU-ROLE · EU-HIGH · UK-RIGHTS · EU-AIA

09 · Fundraise again, sell or merge

Tasgadh no reic

A buyer may acquire fewer rights than the pitch suggests. Separate deal-room disclosure, change of control and asset transfer. Resolve material consents and any required clearance before completion.

Sgrùd fa leth foillseachadh do cheannaiche, atharrachadh smachd agus gluasad so-mhaoin.

Fianais no freagairt

Diligence index, exceptions, consents and closing conditions

Clàr chòraichean agus cumhaichean crìochnachaidh

Nòtaichean air na tùsan / practical checks

List the accountable organisation for each purpose. Who chooses why and how personal data are used? Who acts on instructions? Map each supplier’s own uses separately.

Ainmich a’ bhuidheann chunntachail airson gach adhbhair. Cò a thaghas carson agus ciamar a chleachdar dàta pearsanta? Cò a nì an obair air stiùireadh cuideigin eile? Clàraich fa leth na cleachdaidhean aig gach solaraiche airson a chuid adhbharan fhèin.

For each risk write cause → event → harm to a person. Record likelihood, impact, affected group and evidence before controls. Name the control, tester, due date and risk remaining afterwards.

Airson gach cunnairt sgrìobh adhbhar → tachartas → cron air duine. Clàraich an coltas gun tachair e, buaidh, a’ bhuidheann air an toirear buaidh agus fianais mus cuirear smachdan an sàs. Ainmich an smachd, an neach-deuchainn, an ceann-latha deireannach agus an cunnart air fhàgail às a dhèidh.

Your decision record: workflow and version, permitted and excluded uses, evidence IDs, decision and reasons, dissent, restrictions, owner, reviewer, review date, signature and time. Keep the previous version.

An clàr co-dhùnaidh agad: pròiseas obrach agus tionndadh, cleachdaidhean ceadaichte agus cleachdaidhean taobh a-muigh an raoin aontaichte, comharran-aithne fianais, co-dhùnadh agus adhbharan, eas-aonta, bacaidhean, neach cunntachail, neach-sgrùdaidh, ceann-latha sgrùdaidh, ainm-sgrìobhte agus àm. Cùm an tionndadh roimhe.

ICO-DEAL · UK-IP · UK-NSI

10 · Retire or close the business

Dùnadh

Data, keys and obligations outlive a website. Assign a custodian, return or erase data as applicable, document lawful holds, revoke access and test that restored backups do not reactivate deleted records.

Cuir stad air iuchraichean ruigsinneachd. Till no sguab às dàta mar a dh’fheumar. Dèan deuchainn nach till clàran a chaidh a dhubhadh às nuair a chleachdar cùl-taice.

Fianais no freagairt

Decommissioning record, supplier evidence and remaining contact

Clàr dùnaidh agus neach-conaltraidh

Nòtaichean air na tùsan / practical checks

Trace one data item through collection, prompts, retrieval, model, output, logs, support and deletion. Name source, people, country, recipients, retention, backups and someone who can test deletion.

Lean aon nì dàta tro chruinneachadh, brosnachaidhean don mhodal, lorg dàta, am modal, toradh, logaichean, taic agus dubhadh às. Ainmich an tùs, na daoine, an dùthaich, an luchd-faighinn, an ùine glèidhidh, na lethbhreacan-glèidhidh agus cuideigin a dh’fhaodas deuchainn a dhèanamh air dubhadh às.

Other rights: examine correction, erasure, restriction, portability, objection and human review separately. Record applicable conditions, exceptions, recipients to notify, and any lawful retention or dispute hold.

Còraichean eile: sgrùd ceartachadh, dubhadh às, cuingealachadh, so-ghiùlanachd, cur an aghaidh agus sgrùdadh le duine fa leth. Clàraich cumhaichean, eisgeachdan, luchd-faighinn a dh’fheumar fios a chur thuca agus glèidheadh laghail sam bith no gleidheadh air sgàth connspaid.

Private filing: store completed forms, evidence and signatures with restricted access. Keep the public folder blank. Back up a versioned copy, keep an independently protected copy and test a restore. Set a retention period for each record.

Clàradh prìobhaideach: stòir foirmean lìonta, fianais agus ainmean-sgrìobhte le inntrigeadh cuibhrichte. Cùm am pasgan poblach bàn. Dèan lethbhreac-glèidhidh le comharra tionndaidh, cùm lethbhreac fo dhìon neo-eisimeileach agus feuch aisig. Suidhich ùine glèidhidh airson gach clàir.

ICO-ERASE · ICO-CONTRACT

Read the full UK and EU founder’s guide (EN)

Leabhar-obrach a ghabhas deasachadh · Full English handbook (Word)

Toto-Rex can make mistakes. Everything here is general information, not legal advice: check the primary source, and take advice from a qualified professional before you act.