What this does not cover

The report says plainly what Jadpo covers and what it doesn't:

• Covered by the language: minimisation and storage limitation, access, rectification (by ordinary updates), erasure, portability, privacy by design, records of processing (most of Article 30), and security of processing.
• Supported, but your app's choice: restriction and objection, and consent.
• Not code at all: the lawful basis, the privacy notice, data protection impact assessments (DPIAs), processor contracts, and the data protection officer (DPO).
• Still to add: breach notification, which lists the people whose marked data a breached store or provider held, from the report and access records; and international transfers, where provider packages declare where data is processed and the report shows it.

This is not legal advice. A privacy professional reviews the report.