# Certification Readiness Report -- Nexus Technologies GmbH

**Assessment Date**: 2026-02-01
**Target Certification**: Europrivacy (EDPB-approved GDPR certification)
**Assessor**: Dr. Katharina Weiss, DPO

---

## Overall Readiness: 80.8% -- Ready for Audit Engagement

| Category | Readiness | Status |
|----------|-----------|--------|
| Governance and Accountability | 100% | Ready |
| Lawfulness and Transparency | 75% | Gaps to address |
| Data Subject Rights | 75% | Gaps to address |
| Security of Processing | 100% | Ready |
| Processor Management | 50% | Significant gaps |
| Records and Documentation | 75% | Gaps to address |

---

## Priority Gaps

| Gap | Category | Remediation | Owner | Deadline |
|-----|----------|-------------|-------|----------|
| 4 processors lack Art. 28(3) DPAs | Processor Management | Execute DPA addenda | Procurement | 2026-03-01 |
| No processor audit programme | Processor Management | Establish risk-based audit schedule | DPO Office | 2026-03-15 |
| Consent mechanisms not granular | Lawfulness | Update cookie consent to granular purposes | Marketing | 2026-03-01 |
| Data portability not automated | Data Subject Rights | Implement automated data export API | IT | 2026-04-01 |
| DPIA programme incomplete | Records | Complete 2 outstanding DPIAs | DPO Office | 2026-03-15 |

---

## Timeline to Certification

| Phase | Timeline | Status |
|-------|----------|--------|
| Gap remediation | February-March 2026 | In progress |
| Internal pre-assessment audit | April 2026 | Planned |
| Certification body engagement | May 2026 | Planned |
| Certification audit | June-July 2026 | Planned |
| Certification decision | August 2026 | Projected |

**Prepared by**: Dr. Katharina Weiss, DPO