Features
Privacy-request (DSAR) tracking with statutory deadlines built in. Hosted intake form, countdown tracker, audit trail — from $39/mo. We're the workflow, not the lawyer.
Hosted intake form
Embeddable privacy-request form with regulation picker (statutory windows shown) and the disclaimer built in.
Statutory deadline engine
GDPR one calendar month (Art. 12(3)), CCPA/CPRA 45 days, most US state laws 45 days, Iowa 90, Brazil LGPD 15 — every rule cites the statute it implements; extensions need a logged reason.
Urgency countdowns
Every request shows days-left with ok/warning/critical/overdue bands. Overdues are unmissable.
Strict state machine
received → identity_pending → in_progress → fulfilled. Illegal transitions rejected; no skipping steps.
Audit trail
Every transition, note, and actor timestamped per request. Export the whole history to CSV.
Fulfillment workspace
Per-request data-source checklist, assignment, and a response-package builder that sends the requester a secure, expiring download link.
Denial workflow
Exemptions and denials require a reason code (identity not verified, manifestly unfounded, legal-obligation retention, …) — recorded in the audit trail with your explanation.
Identity confirmation
Real email-link verification (single-use, 72-hour links) before fulfillment, with a stronger detail check or manual review configurable per workspace. Sufficiency stays your call.