TrustArc Features

Data Subject Access Request (DSAR) functionality helps companies comply with user access and deletion requests.

Identity verification functionality validates a person's identity prior to a company complying with a data subject access request.

Privacy Impact Assessment (PIA) features help companies evalute, assess, track and report on the privacy implications of their data.

Data mapping functionality, which helps companies understand how data flows throughout their organization, is achieved through manual surveys sent to company employees.

Data mapping functionality, which helps companies understand how data flows throughout their organization, is achieved through automated machine learning.

Data discovery features collect and aggregate data from a variety of sources and prepares it in formats that both people and software can easily use it to then run analytics.

Data classification features tag the discovered data to make it easy to search, find, retrieve, and track.

De-identification or pseudonymization features replace personally identifiable information with artificial identifiers, or pseudonyms to comply with privacy regulations.

Data Breach Notification features help companies automate their breach response to stakeholders.

Consent management features help companies obtain and manage user consent when collecting, sharing, buying, or selling a user's data.

Website tracking scanning features help companies understand what cookies, beacons, and other trackers are on their websites.

Data Access Governance functionality helps limit the number of people who have access to data unless they are permissioned to do so.

Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges

Create, manage, and track policies and procedures within an organization

Pinpoint and mitigate risk from third-party vendors and suppliers.

Plan, schedule, and execute organization's accounts and assets to ensure compliance with policies and laws

Searchable repository of information about clients

Ensure internal objectives and compliance with policies are met

Detect (and block) vulnerabilities and threats in your applications based on vulnerability information

Process of identifying, evaluating, mitigating, addressing and reporting on potential risks or uncertainties

Collect and maintain structured information that describes data or content

Manage and store data in a database

Track and manage adherence to policies for any service, product, process, or supplier

Identify sensitive or personal information collected from users

Initiate collection and analysis of known risks

Identity verification functionality validates a person's identity prior to a company complying with a data subject access request.

Offers workflows to process Data Subject Access Requests to enable multiple departments to assist when complying with user access and deletion requests.

Offers a user-facing portal for data subjects to request access to their data.

Has reporting and log functionality to prove that companies are in compliance with mandated response time, per privacy laws such as GDPR, CCPA, and others.

Has a centralized view of PIA software functions, such as tracking, templates, and reporting

Offers tracking functionality to manage privacy impact assessments during its lifecycle

Offers assessment templates which can be customized to meet business needs

Offers workflows to enable multiple departments to collaborate on privacy impact assessments.

Has reporting and analytics functionality to highlight risks and compare analyses.

Has a centralized view of data breach notification functions including any tasks that are at risk of falling behind mandated reporting timelines.

Provides tools such as auto-discovery to assist companies in automating their breach notification response.

Provides functionality to help companies comply data breach notification timelines, as determined by various regulatory laws.

Offers workflows to enable multiple departments to collaborate on data breach notification tasks

Has reporting and analytics functionality to show compliance with data breach notification laws.

Offers a dashboard to capture, store, and manage granular user consents

Provide reporting functions showing granular data to demonstrate compliance to regulators

Integrates with marketing software and other analytical tools

Allows end-users to manage their preferences online

Shows audit trails of how user consent preferences have changed

Offers APIs to link to your data

Offers a mobile SDK to use consent management tools on mobile apps

Offers customizeable designs to match corporate branding

Offers server-side storage of consent, not client-side, for compliance reporting purposes

Automatically scan websites to identify web trackers, such as cookies

Automatically updates privacy policies based on scans

Generates a Cookie Notice report

Easy to install on existing websites with simple code

Regularly sends scan reports to stakeholders

Verifies whether scripts or tracking actions execute before or after obtaining user consent, to ensure proper consent gating behavior.

Supports compliance checks against multiple privacy frameworks and regions (e.g. GDPR, CCPA, LGPD, ePrivacy, Canada, EU, etc.).

Runs recurring scans on a schedule, detect changes over time, and alert users when new privacy risks emerge.

Detects trackers, third‑party scripts, and external domains loaded by a website.

Maintains detailed logs, HAR files, or snapshots of findings (with precise URLs, timestamps, and request/response data) to support audit defense.

Produce clean, exportable audit reports (e.g. PDF, CSV, shareable dashboards) suitable for internal stakeholders or external audits.

Define custom privacy policies or rules (e.g. block this domain, require consent before X) and receive remediation suggestions.

Includes or interoperates with modules to assess the privacy posture of third‑party vendors, including DPA status, data sharing practices, or contract compliance.

Integrates with or is designed with artificial intelligence features which may include the ability to scan, generate reports, or check website privacy compliance posture against current legal privacy frameworks.

Designed for non‑technical users and may include intuitive UI, plain‑language explanations of findings, etc.

Integrates or interoperates with consent management platforms (CMPs) or tag management systems (e.g. detect CMP signals, block tags conditionally).

Collection, analysis, and representation of numerical data and generation of reports to understand various patterns

Allow users to access multiple services after entering their login credentials once

Use AI to generate content in the form of text, images, videos, etc.

Define levels of authorization for access to specific files or systems

Data is backed up automatically to prevent data loss

Verify the identity of users/devices to enable secure access

Moving and separately storing data that is not actively used or continuous storage of data for compliance purposes

Compliant with HIPAA, which sets standards for sensitive patient data protection

Track the management and flow of data throughout the organization

Receive alerts and reports of security problems including password breaches

Modification of sensitive data to make it invaluable for unauthorized intruders

Gives visibility to the origin, history, transformation and location of data

Provides a channel for team members to share media files, communicate, and work together

Ability to restore deleted, hidden, or lost data from an email server/system

Addition of necessary external data, applications, tools, or features

Allows users to secure content and data for any use.

A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users

Application programming interface that allows for integration with other systems/databases

Protect sensitive data for digital privacy

Securely stores data to prevent data loss or breaches

Request from data subject to data controller to access, change or delete personal/sensitive information

Data impact assessments to identify and mitigate potential data risks

Convert data into a code for security

Ensure compliance with the General Data Protection Regulation protocols

Application programming interface that allows for integration with other systems/databases

Collection, analysis, and representation of numerical data and generation of reports to understand various patterns

A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users

Set up connections to third-party platforms to improve business processes

Create, design and manage workflows for repetitive tasks

Manage user accounts, profiles, roles, permissions, and other details across applications, devices or networks

Pre-designed layouts that can be customized to match preferences and requirements

Dashboard to view the status of ongoing processes, identify current incidents and track past activities

Set & manage permission levels based on user roles and restrict access to only authorized individuals

Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges

Import and export data to and from software applications

Track and manage adherence to policies for any service, product, process, or supplier

Manage and store data in a database

Store, manage, and track all electronic documents in a centralized location

Online portal through which end users can access the system, manage tasks, or obtain information

Observe and track the demand, usage, progress or quality of a system, product, or user

Use AI to generate content in the form of text, images, videos, etc.

Define levels of authorization for access to specific files or systems

Create, save, and re-purpose templates for emails, forms, etc.

Graphical representation of data

Securely stores data to prevent data loss or breaches

Plan, schedule, and execute organization's accounts and assets to ensure compliance with policies and laws

Manage and support multiple languages

Search and filter data across systems to locate required information by entering keywords or certain criteria

Compliant with HIPAA, which sets standards for sensitive patient data protection

Collection of processes, policies, and standards to manage the storage & usability of enterprise data

Manage and track all disruptions and incidents

Create, manage, and track policies and procedures within an organization

Data impact assessments to identify and mitigate potential data risks

Allow users to access multiple services after entering their login credentials once

Process of identifying, evaluating, mitigating, addressing and reporting on potential risks or uncertainties

Store, process, and transmit cardholder data in compliance with the Payment Card Industry Data Security Standard (PCI DSS)

Initiate collection and analysis of known risks

Moving and separately storing data that is not actively used or continuous storage of data for compliance purposes

Identify sensitive or personal information collected from users

Track the management and flow of data throughout the organization

Manage user consent requests and documents