Custodian

Everything an organisation must do with personal data, done on time and on the record.

The problem

A former employee sends a subject access request. The one-month clock has started, and nobody knows which systems hold their data.

Who it is for

Any organisation holding personal data, which is all of them.

What it does

• A data map: what personal data is held, where, why and for how long.
• Privacy requests with the legal deadline tracked and a search checklist.
• A breach log with a 72-hour assessment timer.
• Impact assessments for new projects and systems.
• Retention schedules with deletion reminders.
• Links to the rest: the processor list from Vetted, training records from Syllabus.

Why it is different

Privacy platforms are priced for large companies, and smaller ones rely on templates that go stale. Custodian keeps the work current.

AI and automation

AI drafts the data map from a short questionnaire and the list of systems in use, and drafts impact assessments for review. For a privacy request, it helps find a person’s data across connected systems and suggests redactions of other people’s details, for a person to check. Deadlines, retention reminders and the breach timer run on their own.

First release

Data map, privacy request tracker and breach log.

Good to know

Custodian organises the work; it is not legal advice.