> ## Documentation Index
> Fetch the complete documentation index at: https://docs.assuric.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Privacy & Security: Overview

> Suppliers, assets, data processing, risks and incidents, plus DSPT, DTAC and DPIAs. See where each one lives in Assuric.

<Note>
  **Quick summary**

  * Privacy & Security holds your supplier, asset, data processing, risk and incident registers, plus the frameworks that assess them.
  * Add your suppliers first. Assuric suggests assets and processing activities from what each supplier typically provides.
  * **Suppliers** is under **Main** in the sidebar, and DPIAs come from a template in **Documents**.
</Note>

## What Privacy & Security covers

The area's **Overview** opens its frameworks, such as SOC 2, ISO 27001, HIPAA, GDPR, DSPT and Cyber Essentials, each with its progress and a **Tasks** link. The other pages open the registers and logs behind them.

## Where each capability lives

| Capability | Where it lives in Assuric | Read more |
| - | - | - |
| **Suppliers** | **Suppliers** in the sidebar, under **Main** | [Suppliers](/privacy-security/suppliers) |
| **Assets** | **Privacy & Security → Assets** | [Assets](/privacy-security/assets) |
| **Devices** | **Privacy & Security → Devices**, a filtered view of Assets | [Devices](/privacy-security/assets#devices) |
| **Your record of processing activities (RoPA)** | **Privacy & Security → Data Processing** | [Data processing and DPIAs](/privacy-security/data-processing) |
| **Data protection impact assessments (DPIAs)** | **Documents → Templates** | [Data processing and DPIAs](/privacy-security/data-processing#generate-a-dpia) |
| **Risks, controls and evidence** | **Privacy & Security → Risk Register** and its **Controls** tab, *Security Controls* tasks, and Documents' **Evidence & Files** | [Risk register](/privacy-security/risk-register#controls-and-evidence) |
| **Incidents** | **Privacy & Security → Incidents**, and **Clinical Safety → Incidents** (one shared log) | [Incidents overview](/privacy-security/incidents-overview) |
| **DSPT** | **Compliance → Frameworks**, then the **DSPT** card, or Ask Assuric | [DSPT](/privacy-security/dspt) |
| **DTAC** | **Compliance → Frameworks**, then the **DTAC** card | [Complete and generate a DTAC form](/privacy-security/dtac) |

## How the registers connect

Filled in separately, the registers are unrelated lists. Linked, they answer what an assessor or customer asks: where does our data go, who's accountable for it, and what happens if something goes wrong.

| Register | Answers | Feeds |
| - | - | - |
| **Suppliers** | Who you rely on | Suggests assets and processing activities |
| **Assets** | What you hold, and where (devices included) | Suggests processing activities, and drives Risk Register asset links |
| **Data Processing** | What you do with personal data, and why (your RoPA) | Reads from the suppliers and assets above |
| **Risk Register** | Information security risks, scored and treated | Links to incidents through *Mapped Risks* |
| **Incidents** | Security events, shared with Clinical Safety | Closes the loop back to the risk it realised |

Suppliers has a catalogue of commonly used suppliers, and Assets and Data Processing suggest entries, each added in one click, so you start from a library, not a blank form.

Pick your suppliers first, because the suggestions that follow fill in most of the chain, then keep the processing register to activities that involve personal data.

## Related articles

<Columns cols={2}>
  <Card title="Frameworks: Overview" icon="award" href="/frameworks/key-capabilities">
    How framework tracking works generally.
  </Card>

  <Card title="Create an incident" icon="siren" href="/privacy-security/incidents">
    The shared creation flow behind every incident, clinical or security.
  </Card>

  <Card title="Evidence and files" icon="paperclip" href="/documents/evidence">
    The evidence library behind every control and incident.
  </Card>
</Columns>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.