DataGrail Privacy Platform

DataGrail is a privacy automation company founded in May 2018 by Daniel Barber and Ignacio Zendejas and headquartered in San Francisco, California. It helps brands understand where personal data lives across hundreds of SaaS and internal systems and meet privacy laws such as GDPR and US state laws without manual spreadsheets and tickets.

The platform combines a patented Live Data Map that detects new systems and processes, Consent Management for websites, Request Manager for data subject request automation, Privacy Assessments for PIAs and DPIAs, a Risk Register and Responsible Data Discovery for PII and sensitive data. Vera, an integrated AI privacy agent, investigates new cookies, suggests consent rules and drafts assessments for human approval. The company cites more than 2,000 integrations and customers such as Salesforce, Dexcom, Databricks and Instacart.

• Live Data Map: Patented, AI-assisted map that detects new systems and data processes.
• Request Manager: Automates access, deletion and opt-out requests across connected apps.
• Consent Management: Enforces website cookie consent with Google Consent Mode and IAB TCF support.
• Privacy Assessments: Automates PIAs, DPIAs and records of processing.
• Risk Register and Discovery: Tracks privacy risks and finds PII and sensitive data in data sources.
• Vera AI agent: Recommends consent rules, drafts assessments and flags risks with human approval.

A Vietnamese e-commerce or digital service company with many SaaS tools can build a live inventory of personal data for its impact assessment dossier. A consumer brand can automate deletion requests across CRM, email and support tools. A software exporter serving US and EU clients can manage website consent and privacy assessments.

Privacy teams get a continuously updated data map instead of survey-based inventories, which supports records of processing and assessments. Data subject requests are fulfilled across thousands of connected apps automatically. Website consent rules are enforced around the clock, and one customer testimonial reports consent policy review time cut by over 75%. Each customer is assigned a named privacy expert for onboarding and support.

Consumers increasingly exercise rights to access and delete their data, and companies use ever more SaaS tools that hold personal data. Vietnam's Personal Data Protection Law requires organisations to know what data they process and to respond to data subject requests, which raises demand for automated data mapping and request handling.

Founded in May 2018 by Daniel Barber (CEO) and Ignacio Zendejas; headquartered in San Francisco. Leader in the IDC MarketScape for data privacy compliance software in 2024 and 2025, SC Awards 2025 Best Compliance Solution, Fast Company Most Innovative Companies 2024. Holds US patents 11,526,627 and 11,829,507; Google Gold CMP Partner and IAB Europe CMP ID 470.