Platform Terms Glossary

This glossary provides standardized terminology for the Kertos platform, presenting preferred terms alongside their synonyms to help you navigate the platform.

Key Features

Kertos Discovery: discovery methods, data discovery tools, discovery channels

Umbrella term for the integrations helping you to identify and map your IT infrastructure, users, and other compliance-relevant data objects.

Inventory: data inventory

The place in the platform from where you manage vendors, systems, assets, and AI use cases.

Systems: data sources, tools, apps, services

Refers to the software, platforms, or tools your organization uses, such as cloud services or internal applications.

Framework: standards, regulations

A set of compliance requirements or guidelines, such as GDPR or ISO 27001, that the platform helps you manage.

Controls: compliance measures

Specific actions or configurations implemented to meet the requirements of a framework (e.g., enabling encryption or access controls).

Trust Center: security portal, compliance hub

A centralized location where you can share your organization’s security and compliance information with stakeholders like customers or auditors.

Integrations: APIs, connected tools

Interfaces that Kertos offers you to connect tools that you use within your organization, like ticketing or HRIS solutions to the Kertos platform for streamlined & automated compliance operations.

Organizational Terms

Organization: company, firm

Represents your business entity within the Kertos platform.

Users: team members, staff accounts

Individuals who have access to your Kertos workspace. Users can have different roles and permissions based on their responsibilities.

Departments: teams, organizational units

Groups within your organization that can be structured in the platform to reflect how your business operates internally.

Roles: function, responsibility

The type of relationship a user has to a system, for example "Data Owner".

Compliance-Specific Terms

DSRs: Data Subject Requests, privacy requests

Requests made by individuals (e.g., customers or employees) to access or delete their personal data.

Evidence: compliance proofs, documentation

Records or documents that demonstrate how your organization has implemented certain controls of a framework and thus complies with that framework (e.g., policies, system configurations).

Policies: guidelines, rules

Documents that outline how your organization operates in alignment with compliance requirements (e.g., data handling policies) and that need acceptance by the members of your organization,

Trainings: educational materials, learning resources

Compliance-related training materials for employees to ensure they understand and follow organizational policies.

RoPA (Records of Processing Activities): processing records, data processing log

A detailed record required under GDPR that documents how personal data is processed within an organization. It includes information such as data classes, processing purposes, and storage durations.

TOM (Technical and Organizational Measures): security measures, safeguards

Measures implemented to protect personal data as required by GDPR.

DPIA (Data Protection Impact Assessment): privacy risk assessment, impact analysis

A process required under GDPR for assessing risks associated with high-risk personal data processing activities. It helps organizations identify privacy risks and implement measures to mitigate them.

Incidents: service disruptions, compliance events

Any unplanned or unexpected event that disrupts an organization’s normal operations, violates security policies, or poses a risk to the confidentiality, integrity, or availability of information. Can range from minor service interruptions to significant events like data breaches or regulatory non-compliance.

AI-Specific Terms

AI Systems: artificial intelligence applications

Refers to any AI tools or systems used by your organization that may need to comply with regulations like the EU AI Act.

AI Use Cases: AI processes

Processes where AI plays a role in data processing.

Kertos Artificial Intelligence: Kertos AI, KAI

The AI capabilities built into the Kertos platform that assist with compliance knowledge and providing recommendations.

Documentation and Support

Help Center: knowledge base, docs

What you are reading right now - a resource containing guides, tutorials, and other documentation to help you understand and use the Kertos platform effectively.