Data mapping

Documenting what personal data an organisation holds, where it comes from, where it is stored, who it is shared with and where it flows.

A data map is the working material behind the record of processing activities, privacy notices and DPIAs. Vendors are a large part of it: each vendor, and each of its subprocessors, is somewhere personal data goes, so the map goes stale whenever a vendor’s subprocessor list changes.

ClauseTrail watches vendors' subprocessor lists, DPAs, privacy policies, terms and AI terms, and tells your team what changed and by when to object.

Browse the vendor directory Start tracking free