The DataGrail DSR intake API is built to enable customers and integration partners to programmatically create and manage privacy requests from anywhere. Whether originating from a web or mobile application or a bulk upload through a script, you can create a DSR in the DataGrail platform from wherever you see fit.
Configure an auto-reply to your associated DSR email inbox to funnel more data subjects to the intake form and to filter out non-DSR emails.
The requestor receives an email at the email address that they used when submitting the request. To verify their identity they simply click the included link. Once the link is clicked the data subject request will move to data extraction in your DataGrail Platform and you will receive an email notification.
When a requestor wants all their data deleted from your systems, they will submit a deletion request. The purpose of a deletion request is to remove any of the requestor's personally identifiable information from systems that your organization uses.
How does email intake work?
Do your best business with DataGrail, the integrated data privacy solution that builds trust and eliminates risk.
DataGrail hosts Data Subject Request Forms standardly for each customer on the route: preferences.customer\_domain.com/privacy. Each form is configurable, allowing Customers to tailor the form to their brand. Below are the degrees of customization currently offered on this form.
Both the GDPR and the CCPA allow individuals to request the deletion of their personal information, unless exceptions apply. DataGrail supports the ability to 'soft' or 'hard' delete this personal information for our Customers.
DataGrail supports many language translations on Privacy and Do Not Sell Intake Forms and corresponding email templates.
Personal data is sometimes keyed using different identifiers that are not email, such as unique identifiers, phone numbers or cookies. This article will walk through how to set up the Multiple Identifier feature and find all personal information from data subjects stored in data systems, while eliminating the possibility of missing data.
Processing privacy requests is a very manual process that can be prone to human error and increase compliance risk. DataGrail's Privacy Intake process helps customers reduce hours spent managing DSARs through automation.
Understanding the location of a Data Subject is important when identifying which policy is applicable to begin processing the request.
By default, DataGrail verifies a data subject's identity through a verification message sent to their email. DataGrail also offers "Smart Verification" functionality, with an increased number of data points that must be verified in order to process a Privacy Request.
If your company utilizes the DataGrail-enabled toll-free number to intake privacy requests, all calls to this toll-free number will create a privacy request in DataGrail.