Flat-Rate DSAR Fulfillment

In plain English

What category is this?

Companies buy to handle money and rules — payments, accounting, tax, audits. Here the focus is privacy compliance.

The idea, briefly

Self-serve DSAR fulfillment that connects to a small SaaS's own data stores (Postgres, Stripe, S3, email/CRM) and executes export and deletion with an audit trail, on a flat monthly fee, rather than enterprise contracts (OneTrust reported at ~$10K/yr by a competitor) or low-end tools whose public documentation stops at intake forms, caps, and reminders. The documented part is the documented intake/cap/reminder surface of low-end tools; that they cannot execute cross-store fulfillment is interpreted.

More ▾Less ▴

What buyers expect

People comparing tools like Enzuzo, Termly, OneTrust expect the basics to work without surprise fees or missing pieces. The loud complaints are: Small teams handle erasure/access requests manually and cannot reliably delete across backups and interdependent stores; HN discussion describes adding a 'gdpr_deleted' soft-delete flag because true deletion was never planned: 'most people I've spoken to are planning to simply add a gdpr_deleted flag to each row in the database. we'll likely see soft deletes for quite some time.'; and a two-person team manually servicing GDPR requests for a two-million-user product.

More ▾Less ▴

Sources

14

Checked

14

Competitors

4

Gaps

8