Turn privacy challenges into confident decisions with automated assessments.

Privacy Impact Assessments, from screen to sign-off.

Run a Privacy Impact Assessment on every new project or process before it launches. A short PIA screen clears low-risk work in minutes, and high-risk work gets a full, scored PIA that ends in the risk register.

Phase 1 · ScreenEvery project
Phase 2 · Assess & fileHigh risk only
  1. Two-phase screening

    A short PIA screen clears low-risk work in minutes and triggers a full Privacy Impact Assessment only where it is needed.

  2. Guided questionnaire

    Purpose, data, security and transfers, pre-filled from your data inventory and past assessments.

  3. Built-in scoring

    Each finding is rated by likelihood, impact and data sensitivity, with no manual maths.

  4. Straight to the register

    Approved risks move into the risk register with an owner and a remediation plan.

Every vendor, processor and sub⁠-⁠processor in one place.

Dutro vendor risk assessment: an overall risk score with data, exposure, transfer, control and legal risk rated low to high

Assess before you launch. Vet before you sign.