Rowpa is UK-built GDPR software for small businesses that have no legal team and no DPO, and that get asked for compliance documents by their customers. Enter your website. Rowpa scans it for the tools, trackers and scripts it recognises, classifies your business, and drafts your Article 30 record of processing activities, with a legal basis, a retention period and a vendor against every activity. Where it is unsure it says so and flags it, rather than guessing quietly. You review and approve everything before it goes anywhere. Then it answers the ask. When a customer wants your GDPR documents, Rowpa assembles a supplier pack addressed to them: how you handle data, sub-processors, international transfers, AI tools in use, security measures, breach and complaints procedures, policies and a named signatory, shared as a link you can revoke or as a PDF. When a buyer sends a security questionnaire spreadsheet, Rowpa drafts every row it can evidence from your record and your security profile, shows the source beside each answer, marks the rows only you can answer, and writes your approved answers back into their own file in their own layout. It also keeps the record alive: a privacy policy generated from your ROPA and flagged when the record moves on without it, a vendor DPA library covering 400+ tools with sub-processor lists and transfer mechanisms checked at the source, a data subject request workflow with AI-drafted responses, a public Trust Center URL for the prospect who checks before asking, a DPIA tool, a breach response planner, and weekly monitoring of ICO guidance and vendor changes. Built for UK and EU small businesses: SaaS startups facing enterprise procurement, e-commerce and app developers, recruitment firms, accountants, solicitors, MSPs, and marketing and web agencies managing client compliance. Hosted in the EU (Frankfurt). No model training on customer data. Row-level tenant isolation. Passwordless sign-in. Cyber Essentials certified by IASME. ICO registration ZC134108. UK GDPR and EU GDPR in one tool, with interface and pricing in English, German, French, Polish and Spanish. Rowpa is not a consent management platform and does not serve a cookie banner. It is not SOC 2 or ISO 27001 automation. It is not legal advice and is not a substitute for a Data Protection Officer where one is legally required. It is the working tool that produces what you are asked for.