Privacy compliance for SaaS, ready for your next customer review.
Privacyboard gives startups and SaaS companies the privacy documents their customers ask for: a privacy policy, a data processing agreement, a subprocessor list and a public privacy center, drafted from the tools you use and kept current. No lawyer needed on the team to get started.
Free to set up · No credit card · About 5 minutes
In short
- For
- B2B startups and SaaS companies without an in-house privacy team
- You get
- Privacy policy, DPA, subprocessor list, records and a privacy center
- Set up
- About 5 minutes from your website address
- Plan
- Free to start, Pro for requests and your own domain, Business for the evidence pack
When privacy comes up in a SaaS company
A prospect sends a questionnaire
It asks for your data processing agreement, your subprocessors and where their data is stored.
Procurement wants a link
Larger customers expect a privacy page they can read and check on their own.
You add a tool
A new analytics, email or support vendor changes your subprocessor list and your privacy policy.
A user asks for their data
Access and erasure requests arrive with a legal deadline: one month under the GDPR.
Your subprocessors, public and current
Customers see each vendor with what it does and where its data is stored, taken from your vendor list.
A DPA with your real subprocessors
The agreement lists the processors from your vendor list, so it never drifts from what you actually use.
Requests through your center
On Pro, requests arrive through a form on your center, with a reference number and an automatic receipt.
How it works
- 1
Start with your website
We read your public pages to prefill your company, your tools and your privacy contact. You confirm what we found.
- 2
Confirm your vendors
Each tool comes with its usual role, purpose and data location from our catalog, marked until you confirm it.
- 3
Publish your privacy center
Validate your documents and publish them at yourcompany.privacyboard.io, or on your own domain with Pro.
What you get
A privacy center to share
Your policy, your vendors with the region where their data is stored, and a way to contact you, on one public page.
Data processing agreement
Drafted for you when you handle personal data on behalf of your customers, with your subprocessors listed.
Subprocessor list
Every vendor with what it does and where its data is stored, from a catalog checked page by page.
Records of processing
Your processing activities suggested from your tools, prefilled, and exportable as PDF or Excel.
Requests with deadlines
Access, erasure and the other rights, with the legal deadline counted. A request form on your center with Pro.
Evidence pack
On Business, one dated file with your registers, validated documents, requests, incidents and consent proofs.
The laws of your customers
GDPR, UK GDPR, US state laws, Switzerland, Canada with Québec, Brazil, Chile and Australia: pick the countries you serve.
Ask your AI assistant
On Pro, a read-only connector lets Claude or ChatGPT answer questions about your workspace, such as which vendors lack an agreement.
Pass their privacy review. Send one link.
When a prospect asks for your data processing agreement, your list of subprocessors or how you handle requests, the answers are already written, current and published.
See the privacy centerPublish it all at yourcompany.privacyboard.io, or on your own domain with Pro.
Which plan fits a SaaS company
Start on Free to draft everything and publish your center. Move to Pro when customers should send requests through a form, when the center belongs on your own domain or when your team works with you. Choose Business when customers or auditors ask for proof and the center should show only your brand.
Go online for free. Grow when you need to.
Your privacy center and cookie banner are online on the Free plan. Pro adds your requests, your domains and your team; Business, your brand only and the evidence pack.
Free
$0 forever
No card, no time limit
For getting compliant and going online on your own.
Start for freeKey features:
- Privacy policy and documents drafted for youDrafted from the tools you really use, then reviewed and validated by you: privacy policy, cookie policy, data processing agreement and more.
- Vendor and processing registersYour tools and data activities in one register, with each vendor’s region, agreement and transfer details prefilled from our catalog.
- Privacy requests and breaches trackedEvery request and every personal data breach with its legal deadline and who to notify.
- Impact assessment screeningTells you which activities need a data protection impact assessment, and which transfers need a transfer impact assessment.
- Privacy center at yourcompany.privacyboard.ioYour policy, vendor list and documents on one public page, with your contact address and a “Powered by Privacyboard” mention.
- Cookie banner on 1 domain, 1,000 recorded choices a monthHolds back analytics and marketing tools until visitors agree, with a small Privacyboard link. Beyond 1,000 choices in a month, the banner keeps working but choices are not recorded.
- Real-browser scan of your site, twice a dayOpens your site in a real browser and lists the cookies and tools it finds, so your banner declares them all.
- 1 person
No card needed
ProRecommended
$32 per month
Billed $384 a year Save $84
For taking requests, covering all your sites and working as a team.
Start with ProEverything in Free, plus:
- Request form and replies from PrivacyboardA request form on your privacy center that lands in your inbox, and replies sent from Privacyboard under your company name.
- Your center on your own domainServe your privacy center at an address such as privacy.yourcompany.com, with one DNS record.
- Cookie banner on up to 3 domains, every choice recordedNo Privacyboard mention on the banner, and no monthly limit on recorded choices.
- Weekly scan of your websiteYour site is checked in a real browser every week, and you get an email when a new tool appears.
- Complete DPIAs and TIAsData protection and transfer impact assessments prefilled from your register and vendors, with PDF export.
- Claude and ChatGPT connectorAsk an AI assistant about your workspace: what is overdue, which vendors lack an agreement. Read-only.
- Up to 5 people, with rolesOwner, admin, editor and viewer. Pending invitations count toward the 5.
- Activity log, kept 13 months
- Support by email
Cancel any time
Business
$109 per month
Billed $1,308 a year Save $240
For proving it to customers and auditors, under your brand only.
Start with BusinessEverything in Pro, plus:
- Your brand onlyNo “Powered by Privacyboard” mention on your privacy center.
- Evidence pack in one clickOne dated file for audits and customer questionnaires: summary, registers, validated documents, requests, incidents and consent proofs.
- Cookie banner on up to 10 domains
- Daily scan of your websiteEvery day instead of every week, with an email when a new tool appears.
- Up to 50 people
- Two-step verification required for everyoneMembers without an authenticator app are asked to turn it on before they can open the workspace.
- Activity log, kept 3 years
- Priority support
- Single sign-on (SAML) and yearly bank transfer, on requestWrite to hello@privacyboard.io.
Bank transfer on request
Questions, answered.
Does Privacyboard replace a lawyer or a DPO?
No. It drafts your documents from your answers and keeps them in order. For an unusual situation, or if the law requires you to appoint a data protection officer, involve a professional.
Can our customers see our subprocessors?
Yes. Your privacy center lists each vendor with its purpose and the region where its data is stored. Legal roles, agreement status and your internal notes are never published.
Can the privacy center live on our domain?
Yes, with Pro: serve it at an address such as privacy.yourcompany.com with one DNS record. On Free it lives at yourcompany.privacyboard.io.
Does it fill in security questionnaires?
No. It gives you the privacy answers those questionnaires ask for: your policy, your DPA, your subprocessors with their regions and how you handle requests and breaches. On Business, the evidence pack gathers them in one dated file.
We sell to customers in the US too. Is that covered?
Yes. Choose the countries you serve: US state laws add a US notice to your policy, US rights with their 45-day deadline, a Do Not Sell or Share page and Global Privacy Control support in the banner.