Platform & capabilities

Every feature in the Priverion platform

One unified privacy and InfoSec platform — from your Article 30 register to vendor risk, controls, and the enterprise backbone. Explore each capability in detail, grouped by what privacy and security teams actually do.
72 documented features
8 categories
GDPR · ISO 27001 · NIS2 · DORA
Book a demo Platform overview
Records & mapping

Records & Data Mapping

Build a living Article 30 register and map exactly where personal data lives, flows, and leaves the organization.
Records of Processing (RoPA)
Your living Article 30 register that builds itself from linked data
GDPR Art. 30ISO/IEC 27701NIS2 Art. 21
Learn more →
Data Flow Mapping
See exactly how personal data moves and when a map goes stale
GDPR Art. 30(1)GDPR Ch. V (Arts. 44–49)NIS2 Art. 21
Learn more →
International Transfers & External Recipients
Chapter V transfers under control, recipient by recipient
GDPR Ch. VGDPR Art. 46DORA Art. 28
Learn more →
Personal Data Inventory
One catalog of every personal data category you process
GDPR Art. 30(1)(c)GDPR Art. 9ISO 27701
Learn more →
Data Collection Points Register
Catalog every channel where data enters the organization
GDPR Art. 30ISO 27701:2019NIS2 Art. 21
Learn more →
Legal Basis Register
Document the lawful basis for every activity, per jurisdiction
GDPR Art. 6(1)GDPR Art. 30(1)(c)GDPR Art. 9
Learn more →
Legitimate Interest Assessment (LIA)
Defensible Article 6(1)(f) balancing tests, fully documented
GDPR Art. 6(1)(f)GDPR Art. 5(1)(c)GDPR Art. 30(1)
Learn more →
Retention & Deletion Schedules
Stop hoarding data: enforce defensible deletion deadlines
GDPR Art. 5(1)(e)ISO/IEC 27701NIS2 Art. 21
Learn more →
Retention Schedule Import via Filerskeeper
Pull authoritative retention rules straight from Filerskeeper into your schedules.
GDPR Art. 5(1)(e)GDPR Art. 30(1)(f)
Learn more →
Purposes & Special Categories Catalog
Maintain reusable processing purposes and special-category data lists for every record.
GDPR Art. 30(1)(b)GDPR Art. 9GDPR Art. 5(1)(b)
Learn more →
Incidents & DSAR

Incidents, Breaches & Data Subject Rights

Run breach response and data-subject requests on a regulatory clock, with deadlines built in.
Data Protection Impact Assessment (DPIA)
DPIAs that recalculate risk the moment you add a control
GDPR Art. 35GDPR Art. 35(7)GDPR Art. 36
Learn more →
Incident & Data Breach Management
Run breach response on a clock, with the 72-hour deadline built in
GDPR Art. 33NIS2 Art. 23DORA Art. 19
Learn more →
Data Subject Request (DSAR) Management
Never miss a DSAR deadline with a live countdown
GDPR Art. 12GDPR Art. 15GDPR Art. 16-17
Learn more →
Affected Persons & Breach Impact Tracking
Quantify breach scope and cascade it to your records automatically
GDPR Art. 33(3)(a)GDPR Art. 5(1)(d)NIS2 Art. 23
Learn more →
Data Subject Onboarding Workflow
Guide new data-subject requests through a tracked, automated onboarding flow.
GDPR Art. 12GDPR Art. 15–22
Learn more →
Vendor risk

Vendor & Third-Party Risk

One register for processors and sub-processors — scored, classified, and tied to the right contracts.
Vendor & Third-Party Register
One register for processors, controllers and sub-processors
GDPR Art. 28GDPR Art. 30(1)(c)ISO 27701
Learn more →
Vendor IT Security Risk Assessment
Score vendor security with questionnaires mapped to real controls
ISO 27001:2022 Annex A 5.19NIS2 Art. 21(2)(d)DORA Art. 28
Learn more →
Vendor Classification & Criticality Scoring
Risk-rank your vendor portfolio on criticality and data impact
GDPR Art. 28ISO 27001:2022 Annex A 5.19DORA Art. 28
Learn more →
Data Processing Agreements & Sub-Processor Chains
Track DPAs and sub-processor chains with synced regulations
GDPR Art. 28GDPR Art. 30(1)(d)GDPR Art. 5(2)
Learn more →
Vendor Documentation & Assessment Linking
Every contract, assessment and task tied to the right vendor
GDPR Art. 28ISO 27001:2022 Annex A 5.19ISO 27001:2022 Annex A 5.22
Learn more →
Vendor Consultation & Approval Process
Document vendor approval decisions with auditable rationale
GDPR Art. 28GDPR Art. 35GDPR Art. 5(2)
Learn more →
Risk

Risk Management

Model risk the way your business measures it, and prove control effectiveness with before-and-after scores.
Configurable Risk Models & Matrices
Build risk matrices that match how your business measures risk
ISO 27001:2022 Clause 6.1.2ISO 27001:2022 Annex A 5.34GDPR Art. 35
Learn more →
Risk Scenario Library
Reusable risk scenarios that apply across assets and standards
GDPR Art. 35ISO 27001:2022 Clause 6.1.2NIS2 Art. 21
Learn more →
Risk Treatment Planning & TOMs
Plan, assign and track mitigations to closure with deadlines
GDPR Art. 32ISO 27001:2022 Clause 6.1.3NIS2 Art. 21
Learn more →
Inherent vs Residual Risk Scoring
Prove control effectiveness with before-and-after risk scores
ISO 27001:2022 Clause 6.1.3GDPR Art. 35(7)(c)NIS2 Art. 21
Learn more →
Risk Assessment by Standard
Assess the same risk differently across each framework you run
GDPR Art. 32ISO 27001:2022 Clause 6.1.2NIS2 Art. 21
Learn more →
Asset Register & Asset Risk Management
Inventory assets and asset groups with standard-driven risk
ISO 27001:2022 Annex A 5.9NIS2 Art. 21DORA Art. 8
Learn more →
Risk Owner Console & Delegation
Give risk owners a threshold-aware view of their risk posture
ISO 27001:2022 Clause 6.1NIS2 Art. 20DORA Art. 5
Learn more →
RoPA Risk Dashboard
Spot which processing activities breach your risk thresholds
GDPR Art. 24GDPR Art. 30(1)ISO 27001:2022 Annex A 5.34
Learn more →
CISO Risk Monitor & Trend Console
Show executives risk trends and remediation progress over time
ISO 27001:2022 Clause 9.1NIS2 Art. 21DORA Art. 5
Learn more →
Asset Groups & Aggregated Group Risk
Cluster assets into groups and roll their scenario risk into one group score.
ISO 27001:2022 Clause 6.1GDPR Art. 32NIS2 Art. 21
Learn more →
Assessments

Assessments & Questionnaires

Build versioned questionnaires once, collect answers anywhere, and evaluate every response with an audit trail.
Assessment Template Builder & Question Bank
Build once, reuse everywhere: versioned multilingual questionnaires
GDPR Art. 35ISO 27001:2022 Annex A 5.34NIS2 Art. 21
Learn more →
External Shareable Assessment Links
Collect vendor and third-party answers without giving them logins
GDPR Art. 28ISO 27001:2022 Annex A 5.19NIS2 Art. 21
Learn more →
Assessment Response Evaluation
Review, approve or reject every answer with a full audit trail
ISO 27001:2022 Annex A 5.36GDPR Art. 5(2)NIS2 Art. 21
Learn more →
Assessment Scoring & Maturity Tracking
Quantify compliance maturity and progress toward your target
ISO 27001:2022 Clause 9.1NIS2 Art. 21DORA Art. 6
Learn more →
Intra-Group Transfer Agreements (IGDTA)
Manage intra-group transfer agreements and SCC terms by region
GDPR Art. 46(2)(c)GDPR Chapter VGDPR Art. 5(2)
Learn more →
Controls & frameworks

Controls, Standards & Frameworks

Map controls across frameworks, evidence each one, and know exactly where you are non-conformant.
Multi-Framework Control Library
100+ frameworks with thousands of controls, ready out of the box
ISO 27001NIST SP 800-53DORA
Learn more →
Cross-Framework Control Mapping
Test once, comply many: map equivalent controls across frameworks
ISO 27001:2022 Annex ANIST CSF 2.0NIS2 Art. 21
Learn more →
Custom Control Sets & Frameworks
Extend built-in standards or define your own framework
ISO 27001NIS2 Art. 21NIST CSF
Learn more →
Technical & Organizational Measures (TOMs)
A central TOM catalog mapped straight to your controls
GDPR Art. 32ISO 27001:2022 Annex ANIS2 Art. 21
Learn more →
Control Maturity Scoring & Assessment
Score control maturity on CMMI levels and target the gaps
ISO 27001:2022NIST CSF 2.0ISO/IEC 15504
Learn more →
Control Evidence & Documentation Linking
Attach proof to every control, reuse it across frameworks
GDPR Art. 32ISO 27001:2022 Annex ANIST CSF 2.0
Learn more →
Compliance Gap Analysis
Know exactly where you're non-conformant and what to fix first
ISO 27001:2022 Annex ANIS2 Art. 21DORA Art. 6
Learn more →
Control Audit Logging & Change Tracking
Prove when each control was reviewed and what changed
ISO 27001:2022 Annex A 5.34GDPR Art. 5(2)SOC 2 CC7.2
Learn more →
Statement of Applicability (ISO 27001 SoA)
Produce a defensible ISO 27001 SoA showing every control's applicability.
ISO 27001
Learn more →
Governance & ops

Governance & Operations

Automate the workflows, reports, and audit trails that keep a multi-entity compliance program running.
Compliance Overview & Spider Dashboard
Communicate compliance posture to leadership at a glance
ISO 27001:2022NIS2 Art. 21DORA Art. 6
Learn more →
Compliance Workflow Automation
Automate approvals and notifications across every record type
GDPR Art. 33ISO 27001:2022 Annex A 5.34NIS2 Art. 23
Learn more →
Unified Activity Log & Change History
One audit trail across every record, who changed what and when
GDPR Art. 5(2)ISO 27001:2022 Annex A 8.15NIS2 Art. 21
Learn more →
Compliance Report Generation
Produce audit-ready reports across standards and languages
GDPR Art. 30(1)ISO 27001:2022 Annex A 5.36NIS2 Art. 21
Learn more →
Task, Project & Meeting Management
Run your privacy and security program with linked tasks and projects
ISO 27001:2022 Annex A 5.8NIS2 Art. 21DORA Art. 6
Learn more →
Document & Policy Management
A governed policy repository with ownership and approval
GDPR Art. 24ISO 27001:2022 Annex A 5.1NIS2 Art. 21
Learn more →
Change Request & Approval Workflow
Govern changes to critical records with proposal and approval
ISO 27001:2022 Annex A 8.32GDPR Art. 5(2)SOC 2 CC8.1
Learn more →
Executive Dashboards, Views & Notifications
At-a-glance status, saved views and notifications that don't overwhelm
ISO 27001:2022 Clause 9.3GDPR Art. 39DORA Art. 17
Learn more →
Bulk Operations & Data Import/Export
Update hundreds of records at once and move data in and out
GDPR Art. 30ISO 27001:2022 Annex A 5.34ISO 27001:2022 Annex A 8.13
Learn more →
Time Machine — Point-in-Time Record History
Reconstruct exactly how your ROPA and vendors looked on any past date.
GDPR Art. 30GDPR Art. 5(2)ISO 27001:2022 Annex A 5.34
Learn more →
Organizational Units & Department Structure
Model your org hierarchy so every record rolls up to the right unit and owner.
GDPR Art. 24ISO 27001:2022 Annex A 5.2
Learn more →
Configurable Status & Taxonomy Management
Tailor every record type's status workflow and category lists to your process.
GDPR Art. 30ISO 27001:2022 Annex A 5.12ISO 27001:2022 Annex A 8.32
Learn more →
Visual Workflow Editor & State Machine Designer
Design approval and automation flows visually, then run them on your records.
ISO 27001:2022 Annex A 5.37
Learn more →
Workflow Email Templates
Author reusable, branded email templates that workflows send automatically.
ISO 27001:2022 Annex A 5.37
Learn more →
Saved Views & Custom Filters
Save and share filtered, sorted views so teams find records instantly.
GDPR Art. 30ISO 27001:2022 Annex A 5.34ISO 27001:2022 Annex A 5.37
Learn more →
Notifications Center & Delivery Preferences
Centralize alerts and let each user tune what, how, and when they're notified.
GDPR Art. 5(2)ISO 27001:2022 Annex A 6.8
Learn more →
Platform & security

Platform, Security & Administration

Multi-tenant isolation, SSO/SCIM, RBAC, AI, and translation — the enterprise backbone, built in.
Enterprise Platform Security & AI Backbone
Multi-tenant, SSO/SCIM, RBAC, audit, AI and translation built in
ISO 27001:2022 Annex A 5.15ISO 27001:2022 Annex A 8.15GDPR Art. 32
Learn more →
Multi-Tenant Architecture & Company Data Isolation
Hard-isolate every company's data with automatic per-tenant collection scoping.
ISO 27001SOC 2
Learn more →
Single Sign-On with SAML2 & Azure AD / Entra ID
Let staff log in through your enterprise IdP via SAML2 or Azure Entra ID.
SAML2ISO 27001:2022 Annex A 5.16ISO 27001:2022 Annex A 5.17
Learn more →
SCIM2 User & Group Provisioning
Auto-provision users and map IdP groups to roles without manual onboarding.
SCIM2 (RFC 7644)ISO 27001:2022 Annex A 5.16SOC 2 CC6.3
Learn more →
Role- & Audience-Based Access Control
Restrict who sees which records by role and audience down to each object type.
ISO 27001:2022 Annex A 5.15SOC 2 CC6.1GDPR Art. 32
Learn more →
Multi-Provider AI Assistant
Generate compliance content with your choice of Anthropic, OpenAI, Google or Bedrock.
Learn more →
Field-Level Auto-Translation
Keep records and policies consistent across languages with automatic field translation.
Learn more →
Custom Fields & Configurable Schemas
Extend any record type with your own fields, no code changes required.
Learn more →
Multi-Company Group Management & Cross-Company Sharing
Share controls and records from headquarters to subsidiaries with controlled sync.
ISO 27001:2022 Annex A 5.1ISO 27001:2022 Annex A 5.9ISO 27001:2022 Annex A 5.36
Learn more →
Anti-Malware File Scanning & Quarantine
Scan every uploaded document, block disallowed types, and quarantine threats.
ISO 27001:2022 Annex A 8.7
Learn more →
User Management & Lifecycle Administration
Administer users, roles, and credentials with full lifecycle and audit control.
ISO 27001:2022 Annex A 5.16ISO 27001:2022 Annex A 5.18SOC 2 CC6.1
Learn more →

See the features that matter to you

Tell us which capabilities you care about and we'll tailor a 30-minute demo to your privacy and security program — no generic pitch.
Book a demo
Your trusted partner for a smarter, more efficient approach to data privacy management.
Product
Priverion Platform System Status
about us
About Priverion Careers
© 2024 Priverion
Imprint Privacy Notice Terms of Service Refund Policy
OneTrust, TrustArc, Drata, Vanta, BigID, DataGuard, Kertos, Securiti and Sprinto are trademarks of their respective owners. Priverion Solutions AG is an independent Swiss company and is not affiliated with, sponsored by, or endorsed by any of these companies. References to these products are made under the fair-use exception for comparative advertising (Swiss UWG Arts. 3(1)(a)(b)(e); EU Directive 2006/114/EC Art. 4) for the sole purpose of informing prospective customers. Methodology and sources for comparative claims are disclosed on each page that contains them; see also our comparative advertising policy. To challenge a specific claim, write to [email protected].