# DataGrail Documentation > DataGrail is a complete privacy platform built for brands that need to go beyond a box-check solution and build real trust with their consumers. It covers the four pillars of privacy management: data discovery and mapping, DSR (Data Subject Request) management, consent management, and privacy risk assessment. All products are built on the DataGrail platform and powered by patented risk intelligence technology and an industry-best integration network. ## Platform Overview - [Documentation Home](https://docs.datagrail.io/): Overview of the DataGrail Privacy Platform and all products. - [Privacy Dashboard](https://docs.datagrail.io/docs/overview/privacy-dashboard): Top-level dashboard for monitoring privacy request trends and platform activity. - [Request Policies](https://docs.datagrail.io/docs/overview/policies): Configure which privacy rights are offered to data subjects globally. Shared concept across Request Manager and Consent. - [Email Notifications](https://docs.datagrail.io/docs/overview/email-notifications): Configure platform email alerts for your team. - [Support Access](https://docs.datagrail.io/docs/overview/support-access): Grant DataGrail support staff temporary access to your environment for troubleshooting. - [Multibrand Overview](https://docs.datagrail.io/docs/overview/multi-brand/overview): Manage multiple brands or business units within a single DataGrail account. - [Multibrand Group Permissions](https://docs.datagrail.io/docs/overview/multi-brand/group-permissions): Map IdP users (e.g. Okta) to Multibrand groups within DataGrail. ### User Management - [Managing Users & Roles](https://docs.datagrail.io/docs/overview/user-management/managing-users): Role-based access control across all products. Covers all roles, how to assign/modify them, and the Principle of Least Privilege recommendation. - [Inviting New Users](https://docs.datagrail.io/docs/overview/user-management/inviting-new-users): Invite users via SSO or SAML/SCIM. Domain restrictions and group provisioning notes. - [SCIM Provisioning](https://docs.datagrail.io/docs/overview/user-management/SCIM): Automate user provisioning and deprovisioning via SCIM. - [Supported SSO Providers](https://docs.datagrail.io/docs/overview/user-management/sso/supported-sso): Overview of all supported identity providers. - [Okta SSO](https://docs.datagrail.io/docs/overview/user-management/sso/okta): Standard Okta SAML setup and advanced Group Provisioning configuration. - [Entra ID (Azure AD) SSO](https://docs.datagrail.io/docs/overview/user-management/sso/entra-id): Microsoft Entra ID SAML configuration. - [JumpCloud SSO](https://docs.datagrail.io/docs/overview/user-management/sso/jumpcloud): JumpCloud SAML configuration. - [OIDC SSO](https://docs.datagrail.io/docs/overview/user-management/sso/oidc): OpenID Connect configuration for Google and Microsoft SSO. - [OneLogin SSO](https://docs.datagrail.io/docs/overview/user-management/sso/onelogin): OneLogin SAML configuration. - [PingOne SSO](https://docs.datagrail.io/docs/overview/user-management/sso/pingone): PingOne SAML configuration. - [VMware SSO](https://docs.datagrail.io/docs/overview/user-management/sso/vmware): VMware Workspace ONE SAML configuration. ## Vera (AI Privacy Assistant) - [Vera Overview](https://docs.datagrail.io/docs/vera/overview): AI-powered privacy agent built on Claude Haiku 4.5 (AWS Bedrock). Covers security architecture (JWT, tenant isolation, permission inheritance), Slack integration, and example prompts. - [Vera MCP: Introduction & Use](https://docs.datagrail.io/docs/vera/vera-mcp/introduction-and-use): Connect Vera to external AI tools and agents via the DataGrail MCP server. - [Vera MCP: Tool Reference](https://docs.datagrail.io/docs/vera/vera-mcp/tool-reference): Full reference for available MCP tools exposed by DataGrail. - [Vera MCP: Usage Examples](https://docs.datagrail.io/docs/vera/vera-mcp/usage-examples): Example workflows using the DataGrail MCP server with external AI agents. - [Vera MCP: Administration](https://docs.datagrail.io/docs/vera/vera-mcp/administration): Admin configuration and access management for the MCP server. ## Request Manager > The #1 automated DSR management platform. Automates access and deletion of personal data across SaaS and internal systems. - [Quickstart Guide](https://docs.datagrail.io/docs/request-manager/getting-started): End-to-end setup: transactional mailer, cloud storage, Privacy Request Center DNS, request policies, and integrations. - [Workflow Automation](https://docs.datagrail.io/docs/request-manager/settings/workflow-automation): Controls for manual review steps, post-verification behavior, Active: Wizard State entry point, and deletion request bypass. - [Request Automations](https://docs.datagrail.io/docs/request-manager/settings/request-workflow-automation): Automate request routing and processing steps based on configurable rules. - [Email Templates](https://docs.datagrail.io/docs/request-manager/settings/email-templates): Customize emails sent to data subjects. - [Multiple Identifiers](https://docs.datagrail.io/docs/request-manager/settings/multi-id): Support for multiple identifiers (e.g. email + user ID) on privacy requests. - [Third Party Disclosure Settings](https://docs.datagrail.io/docs/request-manager/settings/third-party-disclosure): Configure disclosure of third-party data sharing on access responses. - [Audit Log Export (SIEM)](https://docs.datagrail.io/docs/request-manager/siem-audit-logs): Export Request Manager audit logs for SIEM integration and compliance reporting. ### Request Intake - [Privacy Request Center](https://docs.datagrail.io/docs/request-manager/request-intake/privacy-request-center): Data subject-facing form hosted on your domain. DNS setup, customization of text and questions. - [Email Intake](https://docs.datagrail.io/docs/request-manager/request-intake/email-intake): Accept privacy requests submitted via email. - [Toll-Free Number Intake](https://docs.datagrail.io/docs/request-manager/request-intake/toll-free): Accept privacy requests submitted via toll-free phone number (required by some US state laws). - [Identity Verification](https://docs.datagrail.io/docs/request-manager/request-intake/verification): How DataGrail verifies data subject identity before processing requests. ### Request Processing - [Processing Overview](https://docs.datagrail.io/docs/request-manager/request-processing/overview): End-to-end request processing flow and API integration details. - [Wizard Flow](https://docs.datagrail.io/docs/request-manager/request-processing/wizard-flow): Step-by-step wizard used to review and advance requests in the Active state. - [Request Actions](https://docs.datagrail.io/docs/request-manager/request-processing/request-actions): Available actions on a privacy request (approve, reject, cancel, etc.). - [Pending Action](https://docs.datagrail.io/docs/request-manager/request-processing/pending-action): Handling requests that require manual intervention. - [Integration Statuses](https://docs.datagrail.io/docs/request-manager/request-processing/integration-statuses): Reference for all integration processing statuses on a request. - [Approver Role](https://docs.datagrail.io/docs/request-manager/request-processing/approver-role): How the Approver role works in multi-step review workflows. - [Privacy Right: Access](https://docs.datagrail.io/docs/request-manager/request-processing/privacy-right/access): Processing data access requests. - [Privacy Right: Access Categories](https://docs.datagrail.io/docs/request-manager/request-processing/privacy-right/access-categories): Processing access requests by data category. - [Privacy Right: Deletion](https://docs.datagrail.io/docs/request-manager/request-processing/privacy-right/deletion): Processing data deletion requests. - [Privacy Right: Object to Processing](https://docs.datagrail.io/docs/request-manager/request-processing/privacy-right/object-to-processing): Handling objection to processing requests (GDPR Article 21). - [Privacy Right: Third Party Disclosure](https://docs.datagrail.io/docs/request-manager/request-processing/privacy-right/third-party-disclosure): Disclosing third-party data sharing as part of access responses. - [Privacy Right: Transfer](https://docs.datagrail.io/docs/request-manager/request-processing/privacy-right/transfer): Processing data portability/transfer requests. - [Privacy Right: Update Inaccuracies](https://docs.datagrail.io/docs/request-manager/request-processing/privacy-right/update-inaccuracies): Processing requests to correct inaccurate personal data. - [Opt Out Requests](https://docs.datagrail.io/docs/request-manager/opt-out-requests): CPRA Do Not Sell/Share opt-out handling, browser cookie setting, V2 API creation, and request management. ## DataGrail Consent > Cookie and tracker compliance across web domains. Geolocation-based policy enforcement, Google Tag Manager integration, customizable banners. - [Consent Overview](https://docs.datagrail.io/docs/consent/overview): CMP overview: GTM integration, Google Consent Mode, policies, layouts, subdomain sharing, deployment options, and user roles. - [Deployment: Google Tag Manager](https://docs.datagrail.io/docs/consent/deployment-paths/tag-manager): Deploy Consent via GTM. DataGrail manages tag execution and publishes the banner through your GTM account. - [Deployment: Embedded](https://docs.datagrail.io/docs/consent/deployment-paths/embedded-deployment): Deploy consent.js directly on your site without or alongside GTM. - [Consent Policies](https://docs.datagrail.io/docs/consent/settings/consent-policies): Geolocation-based policy frameworks (GDPR, CPRA, etc.). Configures visibility, layout, initial tracking behavior, GPC/DNT handling, offline opt-out linking, and US Privacy Strings. - [Test Mode](https://docs.datagrail.io/docs/consent/settings/test-mode): Test Consent configuration without a staging site. - [Google Consent Mode](https://docs.datagrail.io/docs/consent/settings/category-mapping): Map DataGrail consent categories to Google Consent Mode signals. - [Plugins](https://docs.datagrail.io/docs/consent/settings/plugins): Enable/disable Consent plugins including Cookie Scanner and Local Session/Storage blocking. ### Managing Tracking Technologies - [Best Practices for Managing Trackers](https://docs.datagrail.io/docs/consent/managing-trackers/managing-trackers-best-practices): Step-by-step guide for consent coverage across Tag Managers, CMS platforms, inline scripts, and ad networks. - [Google Tag Manager](https://docs.datagrail.io/docs/consent/managing-trackers/google-tag-manager): GTM tag management with DataGrail Consent. - [Inline Scripts](https://docs.datagrail.io/docs/consent/managing-trackers/inline-scripts): Managing tracking scripts embedded directly in page source via the ScriptControl plugin. - [Cookie Management](https://docs.datagrail.io/docs/consent/managing-trackers/cookie-management): First-party cookie scanning, rule management with wildcard patterns, and unmanaged cookie behavior controls. - [Callbacks](https://docs.datagrail.io/docs/consent/managing-trackers/callbacks): Propagate consent preferences to in-app trackers and platforms like Segment or HubSpot. - [Shopify](https://docs.datagrail.io/docs/consent/managing-trackers/shopify): Consent integration for Shopify apps using DataGrail browser APIs. - [Facebook Pixel](https://docs.datagrail.io/docs/consent/managing-trackers/facebook-pixel): Managing the Facebook Pixel under DataGrail Consent. - [Webflow](https://docs.datagrail.io/docs/consent/managing-trackers/webflow-integration): DataGrail Consent for Webflow Analyze and Optimize products. - [WordPress](https://docs.datagrail.io/docs/consent/managing-trackers/wordpress): WordPress plugin for consent preference management. ### Banner Customization - [Layouts Overview](https://docs.datagrail.io/docs/consent/banner/layouts-overview): Build geo-specific banner notices with custom buttons, links, and translations. - [CSS Customization](https://docs.datagrail.io/docs/consent/banner/css-customization): Extensive CSS options to match the banner to your brand's design system. - [Localization](https://docs.datagrail.io/docs/consent/banner/localization): Translate and localize banner copy for different regions. ### Testing & Troubleshooting - [Testing Consent](https://docs.datagrail.io/docs/consent/testing/testing-consent): Recommended testing workflow using staging/Test Mode, Chrome incognito, Privacy Inspector, and browser console API. - [Privacy Inspector](https://docs.datagrail.io/docs/consent/testing/privacy-inspector): In-browser tool for validating which scripts fire under different consent states. - [Browser Console Utilities](https://docs.datagrail.io/docs/consent/testing/browser-console-utilities): Reference for `window.DG_BANNER_API` commands (config, showConsentBanner, getUSPrivacyString, etc.). - [Audit Logging](https://docs.datagrail.io/docs/consent/testing/audit-logging): Access and download the Consent Audit Log by month. ## Live Data Map - [Live Data Map Overview](https://docs.datagrail.io/docs/ldm/ldm-overview): System inventory, Shadow IT detection, RoPA preparation, and RDD. Three population methods: System Detection, Manual Entry, RDD. - [System Inventory](https://docs.datagrail.io/docs/ldm/system-inventory): View all systems, PII categories, and inherent risk. Supports Instant Risk Classification for sensitive data and AI usage. - [System Profiles](https://docs.datagrail.io/docs/ldm/system-profiles): Per-system hub for processing activities, risk assessments, risks, and data discovery results. - [Processing Activities](https://docs.datagrail.io/docs/ldm/processing-activities): Add, manage, and report on processing activities. Bulk management by Processing Activity. - [RoPA Management](https://docs.datagrail.io/docs/ldm/ropa-management): Automated RoPA creation with auto-filled fields, contributor invitations, compliance alerts, and export options. - [System Detection](https://docs.datagrail.io/docs/ldm/system-detection): SSO/SAML-based automated discovery of third-party systems (Okta, Entra ID, Google Apps). - [Responsible Data Discovery (RDD) Overview](https://docs.datagrail.io/docs/ldm/rdd/overview): ML-powered PII detection and classification using a containerized API agent. - [RDD Agent: Getting Started](https://docs.datagrail.io/docs/ldm/rdd/rdd-agent/rdd-agent-getting-started): Setup guide for the RDD agent. - [RDD Agent: Deployment Overview](https://docs.datagrail.io/docs/ldm/rdd/rdd-agent/rdd-agent-deployment-overview): Deployment options and architecture for the RDD agent. - [RDD Agent: API Keys](https://docs.datagrail.io/docs/ldm/rdd/rdd-agent/rdd-agent-create-api-keys): Creating API keys for the RDD agent. - [RDD Agent: Environment Variables](https://docs.datagrail.io/docs/ldm/rdd/rdd-agent/rdd-environment-variable): Environment variable reference for the RDD agent. - [RDD Agent: Bring Your Own Integration](https://docs.datagrail.io/docs/ldm/rdd/rdd-agent/bring-your-own-integration): Extend RDD to custom or unsupported data sources. - [RDD API: Manage Integrations](https://docs.datagrail.io/docs/ldm/rdd/api/manage-integrations): API reference for managing RDD integrations. - [RDD API: Schedule Scans](https://docs.datagrail.io/docs/ldm/rdd/api/schedule-scans): API reference for scheduling RDD scans. - [RDD API: System Detection](https://docs.datagrail.io/docs/ldm/rdd/api/system-detection): API reference for RDD system detection. ## Risk Management - [Risk Management Overview](https://docs.datagrail.io/docs/risk-management/overview): Overview of all risk management capabilities including assessments and risk register. - [Risk Assessments Overview](https://docs.datagrail.io/docs/risk-management/risk-assessments/overview): DPIA/PIA creation with auto-fill from 2,400+ integrations. Covers GDPR, CPRA, and AI regulations. CPPA compliance required from January 1, 2026. - [Risk Assessments: Getting Started](https://docs.datagrail.io/docs/risk-management/risk-assessments/getting-started): Step-by-step guide to creating your first risk assessment. - [Custom Assessment Templates](https://docs.datagrail.io/docs/risk-management/risk-assessments/custom-templates): Template Editor with multiple question types, pre-filled answers, and nested conditional questions. - [Inbound Assessments](https://docs.datagrail.io/docs/risk-management/risk-assessments/inbound-assessments): Generate shareable links to embed assessments in internal tools and workflows without manual invites. - [Risk Register Overview](https://docs.datagrail.io/docs/risk-management/risk-register/overview): Create, track, and mitigate privacy risks. Linked to assessments and system profiles. Includes suggested mitigation plans and custom risk types. - [AI-Detected Risks](https://docs.datagrail.io/docs/risk-management/risk-register/ai-detected-risks): Automatically surfaced risks identified by DataGrail's AI across your system inventory. ## Integrations - [Integrations Overview](https://docs.datagrail.io/docs/integrations/overview): Central hub for 2,000+ integrations. Three types: API, Internal Systems, Direct Contact. Also covers Webhooks. - [Connecting Integrations](https://docs.datagrail.io/docs/integrations/managing-integrations/add-integrations): Step-by-step guide for adding new integrations. - [Discovered Integrations](https://docs.datagrail.io/docs/integrations/managing-integrations/discovered-integrations): Systems detected by Live Data Map that surface automatically with available integration capabilities. - [Integration Errors](https://docs.datagrail.io/docs/integrations/managing-integrations/errors): Monitor and resolve API errors across all integrations via the Integration Errors dashboard. - [Removing Integrations](https://docs.datagrail.io/docs/integrations/managing-integrations/remove-integrations): How to disconnect integrations. - [Direct Contact Overview](https://docs.datagrail.io/docs/integrations/direct-contact/overview): Email-based workflow for vendors without an API. - [Direct Contact: Custom](https://docs.datagrail.io/docs/integrations/direct-contact/custom): Configure custom direct contact workflows. - [Direct Contact: SSO](https://docs.datagrail.io/docs/integrations/direct-contact/sso): SSO-authenticated direct contact workflows. - [Internal Systems Overview](https://docs.datagrail.io/docs/integrations/internal-systems-integrations/overview): Programmatic access/deletion against first-party data systems. - [Internal Systems: API Specification](https://docs.datagrail.io/docs/integrations/internal-systems-integrations/api-specification): API spec for building Internal Systems Integrations. - [Internal Systems: Custom API Connection](https://docs.datagrail.io/docs/integrations/internal-systems-integrations/custom-api-connection): Connect a custom API as an Internal Systems Integration. - [Internal Systems: API Endpoints for Testing](https://docs.datagrail.io/docs/integrations/internal-systems-integrations/api-endpoints-for-testing): Test endpoints for validating Internal Systems Integrations. - [Webhooks](https://docs.datagrail.io/docs/integrations/webhooks): Receive notifications of new privacy requests in your own systems. ### Request Manager Agent The Request Manager Agent enables Internal Systems Integrations for first-party databases. - [Agent Overview](https://docs.datagrail.io/docs/integrations/internal-systems-integrations/request-manager-agent/overview): Architecture and capabilities of the Request Manager Agent. - [Agent Quick Start](https://docs.datagrail.io/docs/integrations/internal-systems-integrations/request-manager-agent/quick-start): Get the agent running quickly. - [Connections Overview](https://docs.datagrail.io/docs/integrations/internal-systems-integrations/request-manager-agent/configuration/connections/overview): Supported database connection types. - [Connection: API Proxy](https://docs.datagrail.io/docs/integrations/internal-systems-integrations/request-manager-agent/configuration/connections/api-proxy) - [Connection: BigQuery](https://docs.datagrail.io/docs/integrations/internal-systems-integrations/request-manager-agent/configuration/connections/big-query) - [Connection: Databricks](https://docs.datagrail.io/docs/integrations/internal-systems-integrations/request-manager-agent/configuration/connections/databricks) - [Connection: MySQL](https://docs.datagrail.io/docs/integrations/internal-systems-integrations/request-manager-agent/configuration/connections/mysql) - [Connection: Oracle](https://docs.datagrail.io/docs/integrations/internal-systems-integrations/request-manager-agent/configuration/connections/oracle) - [Connection: PostgreSQL](https://docs.datagrail.io/docs/integrations/internal-systems-integrations/request-manager-agent/configuration/connections/postgresql) - [Connection: Redshift](https://docs.datagrail.io/docs/integrations/internal-systems-integrations/request-manager-agent/configuration/connections/redshift) - [Connection: Snowflake](https://docs.datagrail.io/docs/integrations/internal-systems-integrations/request-manager-agent/configuration/connections/snowflake) - [Connection: SQL Server](https://docs.datagrail.io/docs/integrations/internal-systems-integrations/request-manager-agent/configuration/connections/sql-server) - [Connection: SSH Tunnel](https://docs.datagrail.io/docs/integrations/internal-systems-integrations/request-manager-agent/configuration/connections/ssh) - [Credentials](https://docs.datagrail.io/docs/integrations/internal-systems-integrations/request-manager-agent/configuration/credentials): Managing credentials for the agent. - [Environment Variables](https://docs.datagrail.io/docs/integrations/internal-systems-integrations/request-manager-agent/configuration/environment-variables): Full environment variable reference. - [Deploy: AWS ECS](https://docs.datagrail.io/docs/integrations/internal-systems-integrations/request-manager-agent/deployment-guides/aws-ecs-setup-guide) - [Deploy: Azure Container Apps](https://docs.datagrail.io/docs/integrations/internal-systems-integrations/request-manager-agent/deployment-guides/azure-container-apps-setup-guide) - [Deploy: Google Cloud Run](https://docs.datagrail.io/docs/integrations/internal-systems-integrations/request-manager-agent/deployment-guides/google-cloud-run-setup-guide) - [Deploy: Storing Credentials](https://docs.datagrail.io/docs/integrations/internal-systems-integrations/request-manager-agent/deployment-guides/storing-credentials) ### Integration Connection Guides Full connection instructions are available for 200+ integrations at `https://docs.datagrail.io/docs/integrations/connection-instructions/{integration-name}`. Notable examples include: Salesforce, HubSpot, Marketo, Zendesk, Okta, Segment, Amplitude, Braze, Intercom, Snowflake, BigQuery, Redshift, PostgreSQL, MySQL, Stripe, Shopify, Amazon SES, SendGrid, AWS S3, Google Cloud Storage, Azure Blob Storage, and many more. ## API Reference - [API v2 Overview](https://docs.datagrail.io/api/v2): Authenticated via `Authorization: Bearer ` over HTTPS. - [Authentication](https://docs.datagrail.io/api/v2/authentication): API key setup and authentication details. - [Create a Privacy Request](https://docs.datagrail.io/api/v2/create-a-privacy-request) - [Get a Privacy Request](https://docs.datagrail.io/api/v2/get-a-privacy-request) - [Get a List of Privacy Requests](https://docs.datagrail.io/api/v2/get-a-list-of-privacy-requests) - [Update a Privacy Request](https://docs.datagrail.io/api/v2/update-a-privacy-request) - [Update a Privacy Request Integration](https://docs.datagrail.io/api/v2/update-a-privacy-request-integration) - [Get a List of Privacy Request Integrations](https://docs.datagrail.io/api/v2/get-a-list-of-privacy-request-integrations) - [Get a List of Privacy Request Policies](https://docs.datagrail.io/api/v2/get-a-list-of-privacy-request-policies) - [Create an Opt-Out Request](https://docs.datagrail.io/api/v2/create-an-opt-out-request) - [Get an Opt-Out Request](https://docs.datagrail.io/api/v2/get-an-opt-out-request) - [Get a List of Opt-Out Requests](https://docs.datagrail.io/api/v2/get-a-list-of-opt-out-requests) - [Update an Opt-Out Request](https://docs.datagrail.io/api/v2/update-an-opt-out-request) - [Get a List of Opt-Out Integrations](https://docs.datagrail.io/api/v2/get-a-list-of-opt-out-integrations) - [Update an Opt-Out Integration](https://docs.datagrail.io/api/v2/update-an-opt-out-integration) - [Upload Files to Integration](https://docs.datagrail.io/api/v2/upload-files-to-the-integration) - [Sync Remote Files to Integration](https://docs.datagrail.io/api/v2/sync-remote-files-to-the-integration) - [Webhook Callback](https://docs.datagrail.io/api/v2/webhook-callback) - [Fetch Consent Audit Log Exports](https://docs.datagrail.io/api/v2/fetch-the-list-of-consent-audit-log-exports) - [Download a Consent Audit Log Export](https://docs.datagrail.io/api/v2/download-a-specific-audit-log-export) - [API v1 Overview](https://docs.datagrail.io/api/v1): Legacy API. - [v1: Create a Privacy Request](https://docs.datagrail.io/api/v1/create-a-privacy-request) - [v1: Get a Privacy Request](https://docs.datagrail.io/api/v1/get-a-privacy-request) ## Additional Resources - [Employee vs. Consumer Requests](https://docs.datagrail.io/docs/additional-resources/employee-vs-consumer-requests): Guidance on handling privacy requests from employees versus consumers. - [OneTrust Migration Guide](https://docs.datagrail.io/docs/additional-resources/onetrust-migration): Steps and considerations for migrating to DataGrail from OneTrust. - [RoPA Best Practices](https://docs.datagrail.io/docs/additional-resources/ropa-best-practices): Best practices for maintaining Records of Processing Activities. - [Redaction](https://docs.datagrail.io/docs/additional-resources/redaction): Guidance on redacting sensitive data from access request responses. - [Changelog](https://docs.datagrail.io/changelog): Weekly release notes. Monthly archives available from October 2023 onward. - [Status Page](https://status.datagrail.io) - Support: support@datagrail.io