# Records of processing

URL: /systems/trust-and-governance/controls/processing-records · Id: `control:processing-records`

> Records of processing render for any date from field data classes, Purposes, recipients and retention.

Records of processing render for any date from field data classes, [Purposes](/business/nouns/purpose), recipients and retention.

## Satisfies
| Criterion | Text |
| --- | --- |
| [GDPR Art.30](/systems/trust-and-governance/criteria/gdpr/art-30) | Each controller and processor keeps a record of its processing activities. |
| [SOC2 P6.7](/systems/trust-and-governance/criteria/soc2/p6-7) | The entity gives data subjects, on request, an accounting of the personal information it holds and its disclosures. |

## Implemented by
- [Privacy](/workflows/processes/privacy)
- [Privacy](/systems/privacy)

## Test
| Step | Rule |
| --- | --- |
| Kind | Detective: it finds the failure after it happens. |
| Select | Every Purpose and personal field in force on the requested date. |
| Assert | The rendered record lists each one with its data class, recipients and retention. |

## Owner
[Privacy Officer](/agents/legal/privacy-officer), [Legal Team](/agents/legal).

## Example
An auditor asks for a recruiting [SaaS](/products/templates/saas)'s records of processing as of last quarter. They render for that date with each field's data class, recipients and retention.