Skip to main content
Northdocs

Answer the DSAR. Do not leak the third parties.

For DPOs, privacy teams, and counsel answering subject access requests. Release the requester's data, protect everyone else, record what you withheld and why, and keep the evidence for the record.

Book a briefingEmail sales

Prefer to try it yourself? Start a 30-day trialClick through the demo

  • One-month clockGDPR deadline with pause and extension recorded on the case.
  • Identity-first reviewOne decision per person, across every file.
  • Stable pseudonymsPerson 1 stays Person 1 in every document of the case.
  • Audit exportThe activity log as CSV or JSON on Firm and up.

In practice

The access requests you already answer, and the module that does the heavy part.

Each story starts with a job your team already does, names the module that takes it over, and says what changes.

  1. 01
    When

    A subject access request landed last Tuesday, and the business still has not sent the file list.

    Module

    Disclosure OS

    Statutory clock, consultations, and response memo on the caseFirm and up
    Then

    Log it on the case with the GDPR one-month clock. Pause and extend with a recorded reason, and see every open request on the deadline cockpit instead of in one person's calendar.

    How the workload runs
  2. 02
    When

    The export from HR, CRM, and email is three hundred pages that mix the requester with colleagues and customers.

    Module

    Fast Track

    One decision per person, applied across every file in the caseAll plans
    Then

    Fast Track groups each person into a dossier. Release the requester once, protect everyone else, and the decision follows every occurrence in every file.

    See it in the demo
  3. 03
    When

    If you black out every colleague, the requester gets a pack nobody can follow.

    Module

    Pseudonymize

    Person 1, Email 1, Address 1, consistent across the caseAll plans
    Then

    Pseudonymize per category. Colleagues become Person 1 and Person 2, with their emails and addresses numbered to match, consistently across the case. The narrative survives; the identities do not.

    How the workload runs
  4. 04
    When

    Some passages must be withheld to protect others, and the requester is entitled to know.

    Module

    Exemption schedule

    Legal basis per withheld passage, from Danish and GDPR cataloguesFirm and up
    Then

    Record each withholding with its basis from the GDPR catalogue, linked to the page, and draft the response from those rows.

    How the workload runs
  5. 05
    When

    The pack is ready, and the last check is someone scrolling through three hundred pages.

    Module

    Verified export

    Re-scans the output and blocks download if anything survivesAll plans
    Then

    Verified export extracts the output again after redaction. A pending detection or a surviving value blocks the download instead of raising a warning.

    See it in the demo
  6. 06
    When

    The supervisory authority asks how the request was handled.

    Module

    Audit export

    The activity log as CSV or JSONFirm and up
    Then

    Export the activity log as CSV or JSON: who reviewed, who exported, and when. Add a signed QA certificate, so any later change to it can be detected.

  7. 07
    When

    The request includes Teams chats and a recorded one-to-one.

    Module

    Conversation Redact

    Chat exports, transcripts, and audio recordingsAll plans
    Then

    Redact chat exports, transcripts, and audio with the same identities as the documents. Voices can be beeped, silenced, or morphed.

    How the workload runs

Plan tags show the lowest plan that includes a module. The 30-day trial includes all of them. Compare plans

Systems

Pull the data in where it already sits.

Import from SharePoint or S3, or upload PDF, Office, email with attachments, and images up to 100 MB per file.

  • SharePointFirm and up
  • S3Enterprise

Every connector is included in the trial. Where a connector supports write-back, it runs only after a sandbox certification.

Controls

What you will be asked to show.

Trust CenterArchitectureAI policy

  • EU hostingDocuments are hosted and processed by OVHcloud in Frankfurt. Sign-in and billing vendors are listed in the subprocessor list with their transfer basis.
  • AI off, or AI in the EUAn admin can switch AI off for the whole organization, and then no content goes to any AI provider. When it is on, it runs on OVHcloud AI Endpoints in the EU.
  • RetentionAn organization default of 60 days, with a per-case override. Deleted items are purged from trash after 7 days.
  • Published paperworkDPA, subprocessors, architecture, and the security questionnaire are public. There is no SOC 2 or ISO 27001 certification yet; a status letter is available on request.

Questions

What this team asks first

Can we pseudonymize instead of blacking everything out?

Yes. Choose redact or pseudonymize per category. Pseudonyms are consistent across the case, and Person 1, Email 1, and Address 1 share the same number.

What if detection misses something?

Detection layers pattern rules, a local name tagger, and optional AI in the EU, and you can add your own keywords and regular expressions. Review stays in the loop: pending detections block export, and verification rejects a value that survives redaction.

How is the deadline counted?

The GDPR clock runs one month from receipt, with pause and extension recorded on the case. The Danish FOI clock counts working days and excludes public holidays. You can also set a custom clock.

Workloads

Go deeper on a single job

Other teams

Enterprise

Run the next access request on Northdocs, then make it the standard.

  • Invoice, purchase order, and Net 30 on Enterprise
  • Up to 1,000 seats on Enterprise
  • DPA, subprocessors, and security questionnaire published
  • MSA and Enterprise SLA available as drafts for your counsel
Book a briefingEmail sales@northdocs.com

Self-serve

Try it on your own files for 30 days.No card required. Every module on this page is included. The workspace locks when the trial ends unless you subscribe.
Start 30-day free trialClick through the demo

Bring a case you already released. We will show you what survived.

In a 30-minute briefing we run a released PDF through verification and walk your team through the report, line by line.

Prefer to start hands-on? Start a 30-day pilot

Talk to our enterprise team

Tell us about your workloads and we will set up a briefing with a live verification run.

Email sales@northdocs.com