1e84df9769
All checks were successful
CI / go-lint (push) Has been skipped
CI / python-lint (push) Has been skipped
CI / nodejs-lint (push) Has been skipped
CI / test-go-ai-compliance (push) Successful in 32s
CI / test-python-backend-compliance (push) Successful in 30s
CI / test-python-document-crawler (push) Successful in 21s
CI / test-python-dsms-gateway (push) Successful in 18s
6-Phasen-Implementation fuer cloud-faehiges, mandantenfaehiges Compliance SDK:
Phase 1: Multi-Tenancy Fix
- Shared tenant_utils.py Dependency (UUID-Validierung, kein "default" mehr)
- VVT tenant_id Column + tenant-scoped Queries
- DSFA/Vendor DEFAULT_TENANT_ID von "default" auf UUID migriert
- Migration 035
Phase 2: Stammdaten-Erweiterung
- Company Profile um JSONB-Felder erweitert (processing_systems, ai_systems, technical_contacts)
- Regulierungs-Flags (NIS2, AI Act, ISO 27001)
- GET /template-context Endpoint
- Migration 036
Phase 3: Dokument-Versionierung
- 5 Versions-Tabellen (DSFA, VVT, TOM, Loeschfristen, Obligations)
- Shared versioning_utils.py Helper
- /{id}/versions Endpoints auf allen 5 Dokumenttypen
- Migration 037
Phase 4: Change-Request System
- Zentrale CR-Inbox mit CRUD + Accept/Reject/Edit Workflow
- Regelbasierte CR-Engine (VVT DPIA → DSFA CR, Datenkategorien → Loeschfristen CR)
- Audit-Trail
- Migration 038
Phase 5: Dokumentengenerierung
- 5 Template-Generatoren (DSFA, VVT, TOM, Loeschfristen, Obligations)
- Preview + Apply Endpoints (erzeugt CRs, keine direkten Dokumente)
Phase 6: Frontend-Integration
- Change-Request Inbox Page mit Stats, Filtern, Modals
- VersionHistory Timeline-Komponente
- SDKSidebar CR-Badge (60s Polling)
- Company Profile: 2 neue Wizard-Steps + "Dokumente generieren" CTA
Docs: 5 neue MkDocs-Seiten, CLAUDE.md aktualisiert
Tests: 97 neue Tests (alle bestanden)
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
54 lines
2.1 KiB
Python
54 lines
2.1 KiB
Python
"""VVT template generator — creates VVT activity drafts per processing system."""
|
|
|
|
|
|
def generate_vvt_drafts(ctx: dict) -> list[dict]:
|
|
"""Generate VVT activity drafts, one per processing system.
|
|
|
|
Args:
|
|
ctx: Flat dict from company-profile/template-context
|
|
|
|
Returns:
|
|
List of VVT activity dicts ready for creation
|
|
"""
|
|
systems = ctx.get("processing_systems", [])
|
|
company = ctx.get("company_name", "Unbekannt")
|
|
dpo = ctx.get("dpo_name", "")
|
|
activities = []
|
|
|
|
for i, system in enumerate(systems, 1):
|
|
name = system.get("name", f"System {i}")
|
|
vendor = system.get("vendor", "")
|
|
hosting = system.get("hosting", "on-premise")
|
|
categories = system.get("personal_data_categories", [])
|
|
|
|
activity = {
|
|
"vvt_id": f"VVT-AUTO-{i:03d}",
|
|
"name": f"Verarbeitung in {name}",
|
|
"description": f"Automatisch generierter VVT-Eintrag für das System '{name}'"
|
|
+ (f" (Anbieter: {vendor})" if vendor else ""),
|
|
"purposes": [f"Datenverarbeitung via {name}"],
|
|
"legal_bases": ["Art. 6 Abs. 1b DSGVO — Vertragserfüllung"],
|
|
"data_subject_categories": [],
|
|
"personal_data_categories": categories,
|
|
"recipient_categories": [vendor] if vendor else [],
|
|
"third_country_transfers": _assess_third_country(hosting),
|
|
"retention_period": {"default": "Gemäß Löschfristenkatalog"},
|
|
"tom_description": f"Siehe TOM-Katalog für {name}",
|
|
"business_function": "IT",
|
|
"systems": [name],
|
|
"deployment_model": hosting,
|
|
"protection_level": "HIGH" if categories else "MEDIUM",
|
|
"dpia_required": len(categories) > 3,
|
|
"status": "DRAFT",
|
|
"responsible": dpo or company,
|
|
}
|
|
activities.append(activity)
|
|
|
|
return activities
|
|
|
|
|
|
def _assess_third_country(hosting: str) -> list:
|
|
if hosting in ("us-cloud", "international"):
|
|
return [{"country": "USA", "mechanism": "EU-US Data Privacy Framework"}]
|
|
return []
|