ITMR legal tech checker
Document dossier builder
The dossier builder helps companies, start-ups, agencies, platform operators, SaaS/cloud providers and e-commerce teams to collect the documents typically needed for an initial legal review in a structured way, identify gaps and prepare a solid enquiry to ITMR.
What the builder is for
Many legal reviews fail not because of the first legal problem but because of missing facts: a deadline, contract, screenshot, log, vendor document, data flow or chain of title. This tool shows which evidence typically counts for each matter and how ready your dossier already is.
Dossier logic
Turning documents into a reviewable file
The visualisation shows the path from the occasion via evidence and risk interfaces to a structured enquiry. The dossier score updates after the questionnaire.
Process
Six steps to a reviewable dossier
Clarify the occasion
Determine whether it concerns a deadline, contract, data protection, AI, platform, e-commerce, content, cybersecurity or IP rights.
Secure time-critical points
Document deadlines, proof of receipt, event times and ongoing communication early.
Collect evidence
Bundle letters, contracts, screenshots, logs, legal texts, vendor documents and internal decisions.
Flag regulation
Identify GDPR/TDDDG, AI Act, Data Act, DSA, NIS2/BSIG, CRA, BFSG, GPSR, UWG or IP rights as interfaces.
Prioritise gaps
Put critical documents ahead of nice-to-have annexes so the initial review is not blocked by missing core facts.
Send the enquiry
Copy the generated short summary and send it to ITMR with the available documents.
Classification
What this check does
The builder does not replace an individual review. It does show which facts and documents are typically needed so that a legal assessment can be prepared faster, more reliably and on time.
Which cases does the dossier builder cover?
It covers typical ITMR matters: cease-and-desist letters, data breaches, AI/AI Act questions, SaaS/software/cloud contracts, e-commerce, platforms, content/IP rights, cybersecurity/NIS2/CRA, Data Act, BFSG, advertising/claims, reputation and trade secrets.
Why are documents and evidence so important?
In digital business models, legal risks often depend on specific screenshots, versions, logs, contracts, data flows, vendor roles, deadlines and evidence. Without this information, the initial review often remains too abstract.
Where are the limits?
The result is a preparatory orientation. Whether obligations, deadlines, claims, defence options or documentation duties actually apply depends on the specific case, the company's role and the available evidence.
Interactive check
Check dossier readiness
Answer the steps one after the other. At the end you receive a preliminary risk level, prioritised documents and a copyable short summary.
Preliminary result
Dossier classification
Likely classification
Reasons for the classification
Recommended next review points
Documents worth preparing
Copyable short summary for your enquiry
Have ITMR assess your dossier
Send the generated summary together with the available documents. For deadline matters, state the deadline right at the start of your message.
Prepare dossier enquiryDeadlines & evidence
Typical deadlines, risks and dossier documents
The following matrix is a guide for common digital business models and does not replace a review of whether the respective obligation actually applies in the specific case.
| Topic | Typical trigger | Relevant period / status | Documents for the dossier |
|---|---|---|---|
| GDPR data breach | Loss, misdirected mail, unauthorised access, ransomware or misconfiguration | Notification to the supervisory authority generally within 72 hours of becoming aware, if notifiable | Incident timeline, data categories, number of data subjects, TOMs, DPA, immediate measures |
| Data subject rights | Access, erasure, copy, objection or rectification | Response generally within 1 month | Request, identity check, search log, data export, draft response |
| AI Act / AI | AI tool, HR AI, scoring, chatbot, generative output or provider role | AI literacy and prohibitions since 02.02.2025; further obligations staggered and partly subject to updates | AI inventory, use cases, roles, data categories, vendor documents, training records |
| Data Act | Connected product, related service, cloud switching or data access | Generally since 12.09.2025; data by design for new products since 12.09.2026 | Data inventory, interfaces, product description, contracts, trade secret protection |
| NIS2/BSIG & CRA | Cybersecurity, software product, critical sector, supply chain or vulnerability | NIS2/BSIG since 06.12.2025; CRA reporting starts 11.09.2026, main obligations 11.12.2027 | Applicability check, security concept, incident plan, SBOM, VDP/PSIRT, supplier list |
| E-Commerce / BFSG / UWG | Shop, subscription, checkout, cancellation button, claim, review or digital service | Button/cancellation button obligations ongoing; BFSG since 28.06.2025; EmpCo applies since 27.09.2026 | Checkout screenshots, T&Cs, withdrawal, cancellation process, accessibility evidence, claim dossier |
Legal orientation note: This document dossier builder provides structured initial orientation. It does not replace legal advice or a review of the specific case. Deadlines, obligations, risks, claims and defence options must be reviewed on the basis of the actual documents. How we support companies with ongoing documentation is described on our page outsourced legal department; to get started, use our initial contact.