Persona 01
Mid-market DPO
Run DSAR workflow for 5–50 requests per quarter without an enterprise GRC stack.
Run DSAR workflow for 5–50 requests per quarter without an enterprise GRC stack.
You're the DPO because nobody else volunteered. Need working software, not a 40-page guide.
Process intake, redaction, and response across multiple business units with audit trail.
Standard DSAR request form, identity verification step, automatic 30-day timer start.
Pre-configured connectors to Google Workspace, Microsoft 365, Slack, Notion, and major CRMs.
PDF and image redaction with audit log of what was redacted and why.
Cover letter, response itself, redacted evidence bundle, audit trail.
Visible countdown to the 30-day deadline. One-click 60-day extension with logged reason.
Built to the explicit requirements of UK GDPR / EU GDPR Article 15.
UK GDPR Article 15 and EU GDPR Article 15 give data subjects the right to obtain confirmation of whether their personal data is being processed and, if so, access to that data. The controller must respond within one calendar month — extendable by two further months for complex requests, with the extension itself notified within the original month.
The volume of these requests has roughly tripled since 2024 as automated submission tools have matured. Mid-market companies (50–500 staff) are typically processing 2–20 DSARs per quarter without dedicated software, often missing the deadline or producing audit-poor responses. The fine for non-compliance is up to 4% of global turnover or £17.5m / €20m (whichever is higher) — but the operational risk is the bigger driver.
One email when it launches. No newsletter. No marketing sequence.