In preparation for GDPR, Tueoris mapped personal data processing activities for a software-as-a-service company that provides online scheduling and business management software for the health and wellness services industry. In addition to GDPR compliance, including creation of Records of Processing Activities, maps were used to identify data limitation and security control improvements, as well as to support development of policies and procedures reflective of actual personal data processing practices.