Received a GDPR Data Access Request?

You have one month to respond. SAR Portal guides you through each step, from logging the request to delivering the response.

Request a DSAR Process Review Start free trial
one month GDPR deadline

What You're Required to Do

  • ! You must respond within one month or face regulatory action
  • ! You should confirm the requester's identity where you have reasonable doubts, using proportionate checks, before releasing personal data
  • ! You must consider third-party personal data and redact it where disclosing it would not be reasonable
  • ! You must keep evidence of your response for regulators

How SAR Portal Helps

1

Capture the Request

Log the DSAR with all relevant details. The due date is set automatically to one month after the date you received it.

Create a DSAR case in SAR Portal Create a DSAR case in SAR Portal
2

Verify Identity

Built-in identity verification helps confirm you're releasing data to the right person; step up checks where you have reasonable doubts.

Identity verification in SAR Portal Identity verification in SAR Portal
3

Upload Your Data

Upload documents containing the subject's personal data: PDF, Word, Excel, PowerPoint, images, emails (.eml, .msg) and text files. Convert old .doc and .xls files first.

Upload documents to SAR Portal Upload documents to SAR Portal
4

AI Suggests Redactions

AI finds third-party personal data and suggests redactions. You review and approve them before anything is released.

AI redaction in SAR Portal AI redaction in SAR Portal
5

Close the Case With Your Response

Close the case with your response documents. Portal requesters download them securely. Key steps are recorded in the audit log, and you can export the case as a PDF.

Audit logs in SAR Portal Audit logs in SAR Portal

Start handling this DSAR now

Get Started Free

Every free trial gives you Pro features for 14 days. No credit card required.