Use our setup wizard to put together a privacy program in minutes: select your industry and top vendors and let the magic happen.
You can migrate it to other hosting alternatives or to an enterprise platform at any time.
Data inventory, rights requests, impact assessments, vendor and incident management. Ready to fly in a few minutes.
Keep one living inventory of the personal data you hold: categories, purposes, lawful bases, retention periods and data flows. It produces the Article 30 records that GDPR and UK GDPR require, and holds the categories, purposes and retention periods that CCPA and CPRA notices describe.
A portal where people send access, deletion and correction requests. Each request runs on the deadline of the law that applies: 45 days under CCPA and CPRA, one month under GDPR and UK GDPR.
Log, assess and escalate each incident with a structured workflow. For GDPR and UK GDPR, it runs the 72-hour clock and the Article 33 and 34 analysis for notifying the authority and the people affected. Incidents under US state breach laws are kept in the same register.
Guided DPIAs, PIAs, LIAs and TIAs for GDPR and UK GDPR, and the risk assessments that the CCPA regulations require in California. Risk scoring and mitigation recommendations are included.
One subscription gives each organization access to all three: DPO Central, AI Sentinel and VendorWatch. You start with DPO Central, and add the other two when you need them.
The register of the AI systems a client uses or builds, and the rules that apply to each.
Each client's privacy program, step by step, with a progress figure that rises only when you confirm.
A catalog of vendors with their certifications, each linked to the vendor's own official page.
DPO Central at a glance
DPO Central takes you through the stages of a privacy program. Each step stays a draft until you review and confirm it.
The organization, where it operates and which laws apply to it.
Assets, processing activities and vendors.
Guided DPIA, LIA and TIA, one question at a time.
What you must disclose, and how to handle the requests people send.
Breaches, the audit trail and the executive report.
Three hosting options, with different safeguards and levels of control.
You use it in the browser, on desktop or mobile. Nothing to install, and you can take your program elsewhere whenever you like with a simple export.
An isolated instance we run for you from Asturias, Spain, with open LLMs available and a tailored SLA.
Ask us: Managed instanceThe TODO.LAW suite on a machine in your organization. Your data never leaves your premises unless you connect an outside AI provider.
Ask us: Your own hardwareAnswer six short questions about the safeguards you need, and we show which way meets them.
| Product | Price |
|---|---|
| DPO Central, AI Sentinel and VendorWatch on the TODO.LAW cloud | Start free (15-day trial), then $179 a month or $1,800 a year |
Managed instance or your own hardware? Get a quotation.
