Data Mapping and ROPA demo
Builds the record of processing from connected systems and contracts, and flags drift each week 1:34
What the demo shows
For privacy teams: the processing record, built from real systems and contracts and kept true
The record of processing is shown as a register, one row per activity, with its purpose, data subjects, data categories, systems, recipients, transfers, retention and lawful basis; where the systems no longer do what a cell says, a drift marker shows the difference in the cell itself, and a strip counts the activities in sync, drifted and unconfirmed. Discovery agents read the connected systems, web forms and tags, contracts and supplier records; a reconciler compares each activity's claims with reality every week and opens drift items with the evidence for both sides, and records what it set aside and why; a contract reader extracts recipients, hosting and transfer clauses; a register agent drafts the corrected version with every value cited; an independent transfer checker re-derives each transfer and can block publication; a basis and retention checker tests lawful basis and stated against observed retention; an attestation coordinator asks owners only about what changed. The owner confirms or corrects in a short conversation, the privacy analyst approves low-risk changes, and the DPO approves lawful-basis and transfer changes with a reason code and signature; the approved change then proposes a DPIA screening, an access-request search map update and a privacy notice redline.
Transcript
- Data Mapping and ROPA builds your Article 30 record from real systems and keeps it true.
- Records go stale, and an Article 30 failure can cost 2% of turnover.
- Agents test all 412 activities every week.
- Twenty-three have drifted.
- The newsletter's record has no birth date, and nothing leaves Europe.
- Discovery found a date of birth field in a pixel sending data to Virginia.
- The order form lacks transfer clauses.
- The checker confirms it.
- Owen, the owner, answers, a birthday voucher and campaign attribution.
- The agent proposes day and month only and drafts version 7.
- Helena, the DPO, approves with the pixel paused until clauses are signed.
- It ripples onto the DPI, access request map, and privacy notice.
- Every value cited, every decision signed, every change logged.
- InSync activities rose from 71% to 88% with drift found in days.
- Built on Botminds: agents, data, screens, and governance on one platform.
Transcribed from the film’s narration. Captions are on the player.