# Hermetics

> GDPR (RGPD) compliance for companies and their AI agents: the official texts of EU data protection law quoted verbatim with their status, the obligations of a company, and the record of processing activities, from one account reachable three ways (web platform, MCP server, API). Plans without a DPO (agents suggest, the company decides) and with a designated DPO (a human DPO analyses and signs).

## Connect an AI assistant (MCP)

- Endpoint: https://hermetics.fr/api/mcp (Streamable HTTP)
- Authentication: OAuth 2.1 (discovery per RFC 9728, dynamic client registration, PKCE), signing in with an e-mail address and a code; or an API key sent as `Authorization: Bearer hk_...` (get one at https://hermetics.fr/mcp/cle)
- Tools: `search_law` (official passages with source and status), `gdpr_obligations` (a company's GDPR obligations from a few facts), `save_processing_record` and `list_processing_records` (art. 30 record entries, checked, numbered and versioned; an update returns what changed and what it requires), `pending_reviews` (paid plans: the records a new rule may affect, with the rule and its source), and on the paid plans `prepare_analysis` (legal basis, DPIA, LIA, TIA, information notice, privacy policy or the art. 28 review of a processor agreement received, prepared in the organization's space to be validated), `record_request` (a data subject request with its legal deadline) and `report_breach` (a personal data breach with the end of the 72-hour period); nothing is sent to the requester or to the authority
- Details: https://hermetics.fr/mcp

## Plans

- Free: 100 questions per month, 3 record entries, no card
- Without a DPO (suggestions, unsigned; opening soon): Essentiel 17 EUR, Pro 53 EUR, Équipe 170 EUR, Entreprise 530 EUR excl. VAT per month
- Designated DPO (signed): from 170 EUR excl. VAT per month, in France, Portugal, Spain and Ireland
- Prices and limits: https://hermetics.fr/accueil#tarifs

## Notes

- Information on the law, not legal advice, unless a designated DPO signs it.
- Data hosted and processed in the EU. Do not put personal data in questions.
- Contact: contact@hermetics.fr