Article 30 of GDPR requires controllers of personal data to maintain a record of processing. Ticket for Privacy can create Controller registries based on the list of processes a company has. Once created records of processing need to be updated and monitored. Depending on the companie’s territory they can be kept for privacy accountability even if the territory is not under GDPR, as clients might request it through agreements.