Resources
Free tools, statute-cited guides, comparison pages, and product updates for privacy and compliance teams — no email required to read or download.
Free tools
Interactive · no signupDSAR deadline calculator
Compute the response deadline for a Data Subject Access Request across GDPR, CCPA/CPRA, VCDPA, CPA, and 100+ other privacy laws — with the statute citation that drives it.
TemplateFree DPIA template (Word + Docs)
GDPR Article 35-aligned DPIA template with sections for processing description, necessity & proportionality, risk assessment, and mitigations. Editable in Word or Google Docs.
Guides & articles
Long-form, statute-backedDPIA vs PIA: differences explained
When each is required, what they contain, and how they differ under GDPR vs U.S. state laws — plus the workflow teams use in 2026.
ChecklistCCPA deletion request checklist (2026)
Step-by-step checklist for handling a CCPA/CPRA right-to-delete request — verification, scope, exceptions, downstream propagation, and the 45-day timer.
TemplateSub-processor change notification template
A drop-in email + landing page template for notifying customers about a new sub-processor — and giving them the objection window your DPA requires.
TemplateGDPR ROPA template (Article 30)
What a Record of Processing Activities actually requires, the SME-exemption myth, the six columns to track, and a copyable Markdown template you can drop into Notion or Sheets.
GuideCCPA opt-out implementation guide
How to build a compliant Do Not Sell or Share flow — GPC signals, the 15-day fulfillment + 12-month no-reask rules, downstream service-provider obligations, and CPPA enforcement examples.
TemplateAI vendor risk assessment template
A GenAI-aware due-diligence scoring matrix — training-data exposure, prompt-injection, model versioning, RLHF data, and how it lines up with SR 11-7 and NIST AI RMF.
Compare
Honest, sourced product comparisonsOneTrust vs Privacy Automated (2026)
How the platforms differ on automation depth, AI grounding, jurisdiction coverage, audit transparency, and price-per-outcome.
CompareVanta vs Privacy Automated (2026)
Where SOC 2 / ISO automation ends and a privacy operating system begins — DSARs, DPIAs, vendor research, and statutory deadlines.
CompareDataGrail vs Privacy Automated (2026)
How the two privacy platforms compare on AI-grounded answers, DPIA coverage, and the underlying jurisdiction table.
Product updates
Shipped, in orderChangelog
What's shipped lately — new jurisdictions, AI improvements, integrations, and policy updates. Append-only and dated.
ReferenceTrust architecture
The full technical & trust posture — RLS-enforced multi-tenancy, append-only audit, the jurisdiction table, AI grounding, and what we explicitly don't claim.
ReferenceSOC 2 readiness
Anticipated audit scope, control coverage map, sub-service organizations, known gaps and remediation plan, and timing.