Privacy requests, handled in one calm workspace
Intake, identity verification, owner assignment, deadline tracking, evidence collection, and a defensible audit trail — for teams that don't have a privacy ops department.
Inbox
Trusted by lean teams handling real requests
Too big for a shared inbox. Too small for a privacy suite.
Most DSAR tooling is built for enterprises with a dedicated privacy team. Everyone else improvises with email, spreadsheets, and hope.
A request lands in a shared inbox
- No one's sure who owns it or when it's due
- Identity checked over email, if at all
- Evidence scattered across DMs and exports
- Nothing to show a regulator afterward
A request becomes a tracked case
- Assigned owner and a visible deadline clock
- Identity verified before any data moves
- Evidence collected against scoped tasks
- A complete, exportable audit trail
Every request follows the same workflow
From the moment a request arrives to the day you close it — six stages, each with the right checks built in.
Intake
Hosted portal and instant confirmation.
Verification
Human-approved identity checks.
Fulfillment
Assign owners, collect scoped evidence.
Review
Prepare the packet with legal sign-off.
Delivery
Expiring links, not email attachments.
Audit
Export the full record of what happened.
Built for the work, not the org chart
The essentials of a privacy operation, without the implementation project.
Hosted intake portal
Give requesters a clean, branded portal instead of a shared inbox. Every submission lands as a structured case — typed, jurisdiction-tagged, and ready to assign.
Case ownership
Assign, filter, note, and move requests through a workflow everyone can see.
Deadline tracking
A live SLA clock per case, with extensions and overdue escalation built in.
Evidence tasks
Break fulfillment into scoped tasks across your systems and track each to done.
Secure delivery
Send responses through expiring, revocable links — never raw email attachments.
Audit-ready trail
Every important action records actor, timestamp, and entity — exportable on demand.
Privacy tooling should hold itself to the standard it enforces
Privacy Requests handles real personal data. Access, delivery, and history are built to be defensible from day one.
Least privilege
Role-aware access keeps case, file, admin, task, and delivery surfaces scoped to who needs them.
Secure delivery
Response materials go out via expiring links with revocation, passcodes, and access logs.
Auditability
Important actions produce an event trail with actor, timestamp, entity, event type, and metadata.
One plan. Everything to run requests.
Start free, invite your team, and upgrade when you're ready. No implementation call required.
Workspace
One workspace with a hosted portal, full case workflow, secure delivery, and an exportable audit trail.
- Hosted intake portal
- Unlimited cases & tasks
- Identity verification
- Secure expiring delivery
- Full audit-log export
Turn your next request into a tracked case
Set up your portal, invite your team, and handle DSARs from one calm workspace — starting today.