DSAR requests, handled before the deadline.

Track every access and deletion request, keep the data inventory, and log consent and breach records in the dashboard your team actually opens.

GDPR gives you one month. CCPA gives you 45 days. The trial runs 14 days and does not ask for a card.

Dashboard14-day trial
Open cases18
Due this week5
Overdue2

Deadlines by week

Overduejane@example.comAccess · GDPR
Due soonomar@example.comDeletion · CCPA
On trackpriya@example.comAccess · GDPR

Everything a privacy team needs, nothing it doesn't

DSAR case tracking

Every access, deletion, rectification and portability request in one queue, with the statutory clock running from the moment it lands.

Deadline automation

GDPR gives you one calendar month, CCPA gives you 45 days — DSAR Lite computes the deadline automatically and reminds your team at 5, 2 and 1 day out.

Letter templates

Acknowledgment, fulfillment, denial and extension letters, pre-written per jurisdiction and customizable per org.

Data processing inventory

Keep your Article 30 record of processing activities — category, purpose, storage location, legal basis, retention — in one place.

Consent records

Track granted and withdrawn consent per data subject, with source and timestamp.

Breach incident log

Log discovery, severity, and regulator/subject notification timing — GDPR gives you 72 hours.

Built for the compliance team of one

Most privacy software assumes a legal department. DSAR Lite assumes one person who also runs operations. The statutory clock starts when a request lands, and the queue shows what is overdue before anyone has to ask.

Read what GDPR and DSAR mean
A small team standing together in a bright office

GDPR

The General Data Protection Regulation is the EU law that gives people a say over personal data an organization holds about them. It includes a right of access, and a duty to answer that request on a deadline.

DSAR

A data subject access request is how someone uses that right. They ask what you hold, why you hold it, and for a copy. They do not have to use the words DSAR or GDPR for the clock to start. The full explanation is on the about page.