Guardrails
Retention, DSAR handling and risk analyses in place before AI raises the stakes.
← Platform PRIVACY
Automation. Transparency. Trust.
Retention, DSAR handling and risk analyses in place before AI raises the stakes — with a scored, dated record of where your posture stands.
What a data subject is owed
Apply your policy
Your classification levels and their match rules run against the catalogue — as a dry run first, with a full history and a rollback.
Take the data point
Snapshots of identity risk, sharing, retention and GDPR posture, compared over time.
Evidence
A scored, dated record of your posture — for the board, the auditor, the regulator.
What a regulator actually asks for
Evidence beats assurance.
Retention you can evidence
A retention rule that nobody measures is a statement of intent. Snapshots of what is actually held, and for how long, are what turn it into something you can show a regulator.
DSAR handling starts with the catalogue
Answering what you hold about one person is a search problem before it is a legal one. A catalogue that knows where personal data lives is what makes the answer findable inside the deadline.
The level is derived, never asserted
Extraction records what was found and assigns no sensitivity of its own. Your policy decides the level afterwards — which is what lets you reclassify the whole estate when the policy changes, without scanning it again.
A dated record, not a current state
Privacy posture is a moving thing. Every data point is kept and any two can be compared, so what you claimed in March can still be shown in November.
Prove it. Don’t promise it.
Assess your AI readiness
Takes one workshop. Grounded in your real data.