Data Mapping and ROPA demo

Builds the record of processing from connected systems and contracts, and flags drift each week 1:34

What the demo shows

For privacy teams: the processing record, built from real systems and contracts and kept true

The record of processing is shown as a register, one row per activity, with its purpose, data subjects, data categories, systems, recipients, transfers, retention and lawful basis; where the systems no longer do what a cell says, a drift marker shows the difference in the cell itself, and a strip counts the activities in sync, drifted and unconfirmed. Discovery agents read the connected systems, web forms and tags, contracts and supplier records; a reconciler compares each activity's claims with reality every week and opens drift items with the evidence for both sides, and records what it set aside and why; a contract reader extracts recipients, hosting and transfer clauses; a register agent drafts the corrected version with every value cited; an independent transfer checker re-derives each transfer and can block publication; a basis and retention checker tests lawful basis and stated against observed retention; an attestation coordinator asks owners only about what changed. The owner confirms or corrects in a short conversation, the privacy analyst approves low-risk changes, and the DPO approves lawful-basis and transfer changes with a reason code and signature; the approved change then proposes a DPIA screening, an access-request search map update and a privacy notice redline.

Transcript

  1. Data Mapping and ROPA builds your Article 30 record from real systems and keeps it true.
  2. Records go stale, and an Article 30 failure can cost 2% of turnover.
  3. Agents test all 412 activities every week.
  4. Twenty-three have drifted.
  5. The newsletter's record has no birth date, and nothing leaves Europe.
  6. Discovery found a date of birth field in a pixel sending data to Virginia.
  7. The order form lacks transfer clauses.
  8. The checker confirms it.
  9. Owen, the owner, answers, a birthday voucher and campaign attribution.
  10. The agent proposes day and month only and drafts version 7.
  11. Helena, the DPO, approves with the pixel paused until clauses are signed.
  12. It ripples onto the DPI, access request map, and privacy notice.
  13. Every value cited, every decision signed, every change logged.
  14. InSync activities rose from 71% to 88% with drift found in days.
  15. Built on Botminds: agents, data, screens, and governance on one platform.

Transcribed from the film’s narration. Captions are on the player.