Privacyboard

What’s new.

Every new feature and improvement in Privacyboard, month by month.

RSS feed
  1. Improved
    An incident with the processing activities and providers it affects ticked, next to the new-incident email with an Open the incident button and an Overview row that opens that incident.

    Your records now lead to each other

    Incidents, assessments and requests link to the vendors and activities they concern, every page and record has its own address, and emails open the exact record they are about.

    • Incidents: tick the processing activities and providers involved. The data and people concerned are filled in from those activities, and each one opens in a click. An incident created from a vendor alert is linked to that vendor.
    • Assessments: the activity or vendor of each DPIA and transfer assessment opens from the list and from the assessment itself.
    • Privacy requests: when a request means asking your providers or checking your register, the guide links to them.
    • Overview: when one record needs you (a late incident, an overdue request, a vendor to complete, an assessment to review), the button opens that record directly. The same goes for “What applies to you” and the checks before publishing your center.
    • Addresses: each page and each open record has its own address, so the browser Back button works and you can share a link to a vendor, an activity, a request, an incident or an assessment.
    • Emails: a new incident is announced at once to owners and admins, with its notification deadline. Reminders now also cover assessments to review, activities to screen and an outdated privacy center, and owners hear when someone joins the team. Legal deadlines (requests and incident notifications) are reminded on every plan, Free included. Choose your emails in Settings → My account.
    • Cookies: when no website is listed for the banner, the website of your company profile is offered in one click. Analytics or advertising vendors in your list now count as an answer to “Does your website use tracking tools?”.
    • Overview: once you close “What else Privacyboard does”, it stays as one short line of shortcuts.
    Read the documentation →
  2. Improved
    An AI assistant starting a transfer impact assessment for Resend after the user confirms, next to the draft assessment with fields marked Suggested and a cookie banner draft with Google Analytics added, not yet published.

    Your AI assistant can now prepare most of your compliance work

    Ask your assistant to update the register, start an impact assessment, assess an incident, prepare the cookie banner or export a register. You confirm each change, and nothing is published without you.

    • Processing register: add an activity, rename it, mark special categories with their Article 9 condition, record whether it needs a DPIA, or remove one no assessment covers.
    • Vendors: add one, change its category, role or the link to its processing agreement, or remove one nothing uses any more. A new vendor starts with its agreement Not reviewed.
    • Impact assessments: start a DPIA or a transfer assessment as a Draft, prefilled from your records and marked Suggested. You complete and conclude it in Privacyboard.
    • Incidents: record the risk, whether you notified the authority and the people concerned, with the dates, and close an incident once it is assessed and decided.
    • Cookie banner and privacy center: add or change a declared service, or the center's headline, colors, language and certifications, in the draft. The live versions change only when you publish them.
    • Company profile: address, privacy contact, data protection officer, representatives and the default safeguard for transfers.
    • Exports: get the processing register, the requests log or the incident register as a PDF or Excel file, without requesters' details or incident narratives.
    • Each change still needs Also allow a few changes, is shown to you before it happens, and appears in Settings → Activity. Publishing, the custom domain, emails, your team and billing stay in the app.
    Read the documentation →
  3. New
    The Privacyboard connection screen with two workspaces ticked and "Also allow a few changes" checked, next to an assistant updating a vendor's agreement status after the user confirms, and a table of privacy request deadlines.

    Your AI assistant can cover several workspaces and make the changes you allow

    One connection for all your workspaces, four small changes you can allow when you connect, and deadlines and consent rates shown as a table and a chart.

    • One connection can cover several workspaces: tick them when you connect, and the assistant asks which one when needed. Handy for agencies and consultants.
    • Tick Also allow a few changes to let your assistant set a request to In progress or Awaiting identity, complete a vendor or a processing activity, or record a new incident as a draft. It asks you before each change.
    • Every change appears in Settings → Activity and can be undone. An assistant never sends an email, deletes anything or touches your documents, settings, team or billing.
    • In assistants that show visual answers, request deadlines come as a table and cookie consent as a chart by region, with a button to open your workspace.
    • The connection screen now says who publishes the app you are connecting, and connections follow your workspace's two-step verification rule.
    Read the documentation →
  4. Improved
    An AI assistant giving cookie banner acceptance and rejection rates from Privacyboard, next to the list of four Privacyboard prompts and a reply drafted from the workspace's template.

    Your AI assistant now sees documents, assessments and consent rates

    The connector reads your validated documents, impact assessments and cookie banner figures, drafts replies from your own templates and offers four ready-made prompts.

    • Ask for a document's validated text, or which documents need validating again.
    • See which DPIAs and transfer assessments are needed or due for review.
    • Get your cookie banner's acceptance and rejection rates for 7, 30, 90 or 365 days, by region and banner version. Only totals are shared, never a visitor's own choice.
    • Replies to requests start from your templates in Settings → Emails, with the request's dates filled in.
    • Four prompts in your assistant: what to do this week, monthly review, vendor audit, handle a request.
    Read the documentation →
  5. New
    An AI assistant answering which privacy requests are late from Privacyboard, next to the Connect your assistant card with its workspace choice and the Connectors settings with the connector address.

    Ask Claude or ChatGPT about your workspace

    Connect an AI assistant to one workspace, read-only, and ask what is overdue, which vendors lack an agreement or who to notify about an incident.

    • Copy the connector address from Settings → Connectors and add it to your assistant, then sign in and choose the workspace.
    • The assistant reads your compliance status, privacy requests, vendors, processing register and incidents, with the same deadlines as the app.
    • It never sees who sent a request, what they wrote or the emails exchanged, and it cannot change anything.
    • Disconnect it at any time; each use appears in Settings → Activity. Included in the Pro and Business plans.
    Read the documentation →
  6. New
    The Tools on your website card in Vendors listing Google Analytics, Intercom, Meta Ads and Google Workspace with Add and Not a vendor, next to a weekly check email about Hotjar.

    Find the tools on your website from Vendors

    Vendors now lists the tools your website uses that are missing from your list, and adds them in one click with their details.

    • Find tools on your website reads your home page, your privacy policy and your domain’s email records again, and adds what your cookie banner and the last browser check have seen.
    • Add fills the vendor from the catalog and links it to the activities that use that kind of tool; Not a vendor hides it everywhere, Cookies included.
    • On the Pro and Business plans, the automatic browser check emails you when a new tool appears on your site and is not in your vendor list.
    Read the documentation →
  7. New
    The sign-in page with Continue with Google above the email field, the account page listing the ways to sign in, and two-step verification still on.

    Sign in with Google

    Sign in or create your account in one click with your Google account, without waiting for an email.

    • Continue with Google on the sign-in page, with a work or personal Google account.
    • If you already have an account with the same email address, Google opens that account, with the same workspaces and roles.
    • Invited colleagues can join the same way, as long as their Google account uses the invited address.
    • Two-step verification still applies, and your account page shows every way you can sign in.
    Read the documentation →
  8. New
    The Assessments page listing activities by DPIA status, the screening dialog with suggested criteria, and a risk rated high before measures and low after.

    Impact assessments: DPIA and transfer assessments

    See which activities need a DPIA, run it with your records already filled in, and document transfers outside the EEA with a transfer impact assessment.

    • Screen each activity against the nine EDPB criteria: the ones your records point to are suggested, and two or more mean a DPIA is usually needed.
    • The DPIA covers context, necessity, measures and three risks rated before and after your measures, with a dated conclusion and a yearly review.
    • Vendors outside the EEA show whether a transfer impact assessment is needed, and it walks through the transfer, the tool, the laws of the destination and supplementary measures.
    • Each assessment exports to PDF and is included in your evidence pack.
    Read the documentation →