ISO/IEC 27701:2025 · Privacy information management system

ISO 27701 Toolkit: documentation for your privacy management system

Editable templates and tools to implement a privacy information management system based on ISO/IEC 27701:2025, with GDPR/UK GDPR and US state privacy law annexes. Word and Excel, no macros, in English.

Buy the toolkit · US$69

Secure checkout with Payhip · instant download

  • 38 Word documents
  • 15 Excel tools
  • 78 Annex A controls
  • 2 legal annexes
  • Instant download
  • Free sample to try first
  • Editable Word and Excel, no macros
  • Support: hola@nexodocs.com
NexoDocs ISO 27701 Toolkit cover

What's inside

Policy, roles and scope

Privacy policy, context and PII roles (controller and processor), legal requirements, scope and responsibilities.

Records and Statement of Applicability

Records of processing as controller and processor, logs for requests, breaches and transfers, and a Statement of Applicability for the 78 controls.

Procedures

Data subject requests, DPIA, breach response, retention and disposal, transfers, privacy by design, processors and consent.

Risk, objectives and indicators

Privacy risk methodology and register with heat map, objectives, indicators, internal audit and management review.

GDPR and UK GDPR annex

Article-by-article crosswalk, legitimate interests assessment, breach notification templates, DPO and representative, transfers and UK complaints.

US state privacy laws annex

20 states in effect (October 2026), CCPA/CPRA crosswalk, notice addendum and opt-out signals, request and appeal procedure, contract addendum.

Independent product, not affiliated with ISO or IEC. Created with substantial AI assistance (Claude) and checked in Microsoft Word and Excel for Windows. License for one organization.

Frequently asked questions

Does it include the text of ISO/IEC 27701?

No. The toolkit contains templates and guidance written by NexoDocs; the standard is sold by ISO or your national standards body.

Do I need ISO 27001 first?

No. Since the 2025 edition ISO/IEC 27701 is a standalone management system standard. The toolkit includes a cross-mapping if you also run an ISO/IEC 27001 ISMS.

Does it guarantee GDPR compliance or certification?

No. It organizes the work and the evidence, but compliance and certification depend on your implementation and the auditor. The legal annexes are orientation, not legal advice.

Buy the toolkit · US$69

Buy the toolkit · US$69