One catalog of every personal data category you process
The same data category, named three ways
When a supervisory authority asks what personal data do you actually process, the honest answer is often buried across a dozen spreadsheets, intake forms, and team conventions. The same category — say, health information — gets named three ways and classified inconsistently from one activity to the next.
That inconsistency is not cosmetic. Special categories under GDPR Art. 9 demand heightened protection, and you cannot apply controls to data you have not catalogued coherently. A category added in one system never reaches the register an auditor reads.
Across international entities the problem compounds: each operation keeps its own list, in its own language, drifting further apart every quarter.
What you can do with Personal Data Inventory
- Define personal data categories, including special categories like health and biometric data, in one place.
- Link each category to its processing activities and see which activities rely on it.
- Tag and classify data to your organization's own taxonomy, not just predefined defaults.
- Auto-translate category descriptions so classifications read consistently across every language you operate in.
- Fall back to predefined defaults for legacy records, keeping older data retrievable as your catalog evolves.
- Export the full inventory in JSON or Excel for auditors, review, or onward systems.
What it delivers to your program
- Answer "what data do we process" in minutes — not a multi-day spreadsheet reconciliation before an inspection.
- Apply heightened protection consistently, because special categories are catalogued once and visible everywhere they are used.
- Keep international entities aligned — change-managed sharing pushes one definition across companies instead of letting local lists diverge.
- Hand auditors a structured, exportable record rather than a screenshot of someone's working file.
Built for compliance
These references map the feature to specific obligations. DPMS supports and helps you evidence them — it does not replace your legal assessment.
| What DPMS does | Maps to | How |
|---|---|---|
| Catalogues data categories per processing activity | GDPR Art. 30(1)(c) | Each activity linked to the personal data categories it processes |
| Flags special categories for heightened handling | GDPR Art. 9 | Dedicated classification for health, biometric, and other special data |
| Maintains a controlled inventory of personal data | ISO 27701 | Centralized catalog with tagging and change-managed sharing |
Why Priverion
Unlike a standalone spreadsheet or a general-purpose GRC tool, this inventory is the single source that feeds your RoPA, your legitimate interests assessments, and your DPIAs. Define a category once and it flows to every activity, assessment, and register that references it — no re-keying, no divergence. Predefined and custom categories sit side by side, with auto-translation built in, so one catalog stays accurate across every entity and language you operate in.
Questions DPOs ask before a demo
Does the inventory connect to our RoPA and DPIA records?
Can we define our own categories, or only predefined ones?
How does this work across multiple companies or entities?
Can we get our data out?
Explore related capabilities
Ready to catalog every personal data category in one place?
