# DPO Cockpit
URL: https://docs.autociso.io/console/privacy/cockpit/
Description: Your privacy operations dashboard: a posture score and action cards for the gaps that need attention. Privacy is available on The Scale plan. Owners, Managers and Members can open it.

*This is the help text the console shows in the help panel on this page.*

Your privacy operations dashboard: a posture score and action cards for the gaps that need attention. Privacy is available on [The Scale plan](https://docs.autociso.io/getting-started/plans-and-features/). [Owners, Managers and Members](https://docs.autociso.io/getting-started/roles-and-permissions/) can open it.

### Privacy Posture
The score shows how complete your privacy records are. For [every asset](https://docs.autociso.io/console/directory/assets/) marked as containing personal data, AutoCISO checks five fields: lawful basis, data categories, retention period, next review date and data subject categories. The score is the share of those fields that are filled in, across all such assets. A higher score means fewer gaps.

### Action Cards
Each card shows a count; click it to open the list behind it.
- **High-Risk Processing** — active or draft [processing activities](https://docs.autociso.io/console/privacy/register/) that require a DPIA that is not completed.
- **Weak Access Controls** — assets with personal data that people have access to.
- **Missing DPAs** — suppliers that handle personal data but have no signed [Data Processing Agreement](https://docs.autociso.io/console/privacy/data-processors/).
- **Missing Transfer Basis** — processors with no cross-border transfer mechanism set.
- **Overdue Retention Reviews** — processing activities whose next review date has passed.
- **Open DPIAs** — [DPIAs that are not completed](https://docs.autociso.io/console/privacy/dpia/) or superseded.
- **Unmapped Personal Data** — [Data Dictionary entries](https://docs.autociso.io/product/privacy/data-dictionary/) not linked to any asset, supplier or processing activity.
- **Sensitive Without DPIA** — special-category Data Dictionary entries without a completed DPIA on their linked activities.
- **Dictionary Overdue Review** — Data Dictionary entries past their review date.

If nothing is tagged yet, the page asks you to tag assets or suppliers that handle personal data first.