Knowledge Hub
Privacy vendors & tools
A structured view of the privacy technology landscape, grouped by function (what the tool does), with each entry tagged by offering type. Grounded in the IAPP Privacy Tech and AI Governance vendor taxonomies. Inclusion is informational, not an endorsement — selection should always follow your own due diligence.
- Privacy management platforms
- Consent, preference & cookie management
- DSAR & data subject rights
- Data discovery, mapping & classification
- De-identification, anonymisation & redaction
- Assessment, monitoring & incident response
- Privacy intelligence & knowledge
- AI governance
| Vendor | Type | Focus | Official site |
|---|---|---|---|
| 2B Advice | Platform | German privacy software and consulting group; its Ailance platform (listed in the 2026 AI report) integrates RoPA and compliance modules. | 2b-advice.com |
| Caralegal | Platform | German privacy management software covering RoPA, DPIA and now AI system documentation under the EU AI Act. | caralegal.eu |
| ComplyCloud | Platform | Danish compliance software combining GDPR document automation with legal updates maintained by in-house lawyers. | complycloud.com |
| DataGuard | Platform | Privacy- and compliance-as-a-service platform pairing software with named privacy experts (DPO-as-a-service); now lists AI assessment capability. | dataguard.com |
| DPOrganizer | Platform | Privacy management software for mapping, visualising and reporting on personal data processing, aimed at privacy teams. | dporganizer.com |
| Ethyca | Platform | Developer-centric privacy engineering platform built around the open-source Fides standard for privacy-as-code and AI governance. | ethyca.com |
| Keepabl | Platform | UK SaaS privacy management solution packaging GDPR compliance (RoPA, breach log, gap analysis) for SMEs and in-house teams. | keepabl.com |
| OneTrust | Platform | Market-leading privacy, ethics and AI governance platform spanning consent, assessments, data mapping, DSAR and AI registry modules. | onetrust.com |
| PrivacyEngine | Platform | Privacy management software with consultancy heritage (formerly Sytorus), covering assessments, training and DSAR workflow. | privacyengine.io |
| PrivacyPerfect | Platform | Dutch GDPR compliance suite for processing registers, DPIAs, breach registers and subject requests, fully EU-hosted. | privacyperfect.com |
| RESPONSUM | Platform | Belgian privacy management platform with knowledge-base-driven workflows for RoPA, DSARs, incidents and awareness. | responsum.eu |
| Securiti | Platform | Data Command Center unifying privacy, security, governance and AI governance over structured and unstructured data at scale. | securiti.ai |
| TrustArc | Platform | Long-established privacy compliance platform (PrivacyCentral, Cookie Consent Manager) with assessments, certifications and Nymity research content. | trustarc.com |
| Wired Relations | Platform | Scandinavian GRC-for-privacy platform giving privacy and infosec teams a simple system of record for processing activities and vendors. | wiredrelations.com |
| WireWheel | Platform | Enterprise privacy program management and assessment platform, acquired by Osano in December 2023 and integrated into the Osano platform. | wirewheel.io |
| Vendor | Type | Focus | Official site |
|---|---|---|---|
| Cassie by Syrenis | Tool | Enterprise consent and preference management platform built by UK firm Syrenis. | trustcassie.com |
| Clarip | Platform | AI-driven data privacy platform for consent, DSAR fulfilment and data risk intelligence; listed for technical AI assessments in 2026. | clarip.com |
| Clym | Tool | Website compliance widget combining consent, DSAR intake and accessibility for SMBs. | clym.io |
| Cookie Information | Tool | Nordic consent management platform for websites and mobile apps. | cookieinformation.com |
| Cookiebot | Tool | Automated cookie consent and website scanning solution (Cookiebot CMP), part of Usercentrics but sold under its own brand and site. | cookiebot.com |
| CookieYes | Tool | High-volume self-serve cookie consent platform popular with SMB websites. | cookieyes.com |
| Didomi | Tool | European consent and preference management platform for web, app and CTV, with compliance monitoring. | didomi.io |
| iubenda | Tool | Attorney-crafted policy generation and consent solution for websites and apps; part of the team.blue group. | iubenda.com |
| Ketch | Platform | Programmatic privacy platform for consent orchestration, rights fulfilment and data permissioning. | ketch.com |
| Osano | Platform | Data privacy platform covering consent management, subject rights, assessments and vendor monitoring for mid-market and enterprise. | osano.com |
| Sourcepoint by Didomi | Tool | Publisher- and adtech-focused consent, messaging and privacy compliance platform, now part of the Didomi group but operating from its own site. | sourcepoint.com |
| Termly | Tool | SMB-focused compliance tool offering policy generators, cookie consent and basic DSAR intake. | termly.io |
| Usercentrics | Tool | Leading European CMP for websites and apps; parent of the Cookiebot product line. | usercentrics.com |
| Vendor | Type | Focus | Official site |
|---|---|---|---|
| DataGrail | Platform | Privacy control platform automating DSARs, data mapping and risk monitoring via 2,000+ SaaS integrations. | datagrail.io |
| Exterro | Platform | Legal GRC platform spanning e-discovery, digital forensics, data discovery and privacy (DSAR, breach) workflows. | exterro.com |
| Facit Data Systems | Tool | Video and document redaction software (Identity Cloak) widely used for CCTV DSAR responses. | facitdatasystems.com |
| Just DSARS — Vula group (our company) | Managed | UK/ZA managed DSAR service handling end-to-end subject access fulfilment at fixed two-tier pricing. | justdsars.com |
| MineOS | Platform | No-code data governance platform (formerly Mine PrivacyOps) for data mapping, DSAR automation and AI asset discovery. | mineos.ai |
| Phaselaw | Tool | Document review and redaction tooling used for DSAR disclosure preparation. | phaselaw.com |
| Prighter | Managed | Legal-tech provider of GDPR/UK rep services (Art. 27) and privacy compliance tooling for non-EU businesses. | prighter.com |
| Transcend | Platform | Privacy infrastructure platform automating data subject requests, consent and data inventory at the code/data-system layer, now with AI governance. | transcend.io |
| Truyo | Platform | Intel-incubated privacy rights automation platform (IntraEdge company) now spanning consent, DSAR and AI governance readiness. | truyo.com |
| Vendor | Type | Focus | Official site |
|---|---|---|---|
| BigID | Platform | Data discovery and intelligence platform using ML to find, classify and act on personal data for privacy, security and governance. | bigid.com |
| Collibra | Tool | Enterprise data intelligence and governance platform with privacy and AI governance modules layered on its data catalog. | collibra.com |
| Egnyte | Tool | Cloud content collaboration and governance platform with sensitive-content classification and ransomware/privacy controls. | egnyte.com |
| Informatica | Tool | Enterprise cloud data management platform with data privacy, masking and governance capabilities. | informatica.com |
| LightBeam.ai | Tool | Identity-centric data security platform converging discovery, classification and privacy automation. | lightbeam.ai |
| Ohalo | Tool | Maker of Data X-Ray for discovering and redacting sensitive data across unstructured stores. | ohalo.co |
| Relyance AI | Platform | Code- and contract-level data governance platform building live data maps, RoPA and AI/data flow oversight from source. | relyance.ai |
| Spirion | Tool | Specialist sensitive-data discovery and classification software with high-accuracy matching. | spirion.com |
| Vendor | Type | Focus | Official site |
|---|---|---|---|
| Anonos | Tool | Statutory pseudonymisation technology (Data Embassy / Variant Twins) preserving data utility with GDPR-grade protection. | anonos.com |
| Blurit | Tool | AI-based image/video anonymisation (face and licence-plate blurring) by Wassa, used for CCTV redaction in DSARs. | blurit.io |
| Hazy | Tool | Synthetic data pioneer whose software assets were acquired by SAS (Nov 2024) and folded into SAS Data Maker. | hazy.com |
| MOSTLY AI | Tool | Synthetic data generation platform producing statistically representative, privacy-safe datasets. | mostly.ai |
| Privacy Analytics | Managed | IQVIA company providing expert determination, de-identification software and services for health data. | privacy-analytics.com |
| Privitar | Tool | Former leading UK data privacy engineering platform; acquired by Informatica in 2023 and absorbed into its data management stack. | informatica.com |
| Skyflow | Tool | Data privacy vault API isolating and tokenising sensitive data for applications and LLM workflows. | skyflow.com |
| Tonic.ai | Tool | Synthetic and de-identified test-data platform for software development and AI training environments. | tonic.ai |
| Trūata | Managed | Mastercard-owned anonymisation and privacy-enhanced analytics provider operating as an independent data trust. | truata.com |
| Vendor | Type | Focus | Official site |
|---|---|---|---|
| BreachRx | Tool | Incident response readiness and orchestration platform automating regulatory and contractual breach obligations. | breachrx.com |
| Drata | Tool | Compliance automation platform for continuous control monitoring across security and privacy frameworks. | drata.com |
| Granite | Tool | Finnish GRC tool for risk management, privacy assessments and compliance workflows. | granitegrc.com |
| Immuta | Tool | Data security and access governance platform enforcing dynamic policy controls and masking on analytical data. | immuta.com |
| Lokker | Tool | Web privacy risk platform detecting trackers, pixels and session-recording exposure in real time. | lokker.com |
| Matomo | Tool | Open-source, privacy-respecting web analytics platform offered as a compliant alternative to Google Analytics. | matomo.org |
| ObservePoint | Tool | Tag and privacy governance platform auditing websites for trackers, cookies and data leakage. | observepoint.com |
| Privacera | Tool | Unified data access governance platform (Apache Ranger heritage) for discovery, masking and access control across cloud data estates. | privacera.com |
| Privado | Tool | Privacy code-scanning platform giving engineering-level visibility of personal data flows and consent compliance. | privado.ai |
| RadarFirst | Tool | Incident risk-assessment and breach-notification decisioning platform; 2026 report lists AI policy/compliance capability. | radarfirst.com |
| Secureframe | Tool | Automated security and privacy compliance platform covering SOC 2, ISO 27001, GDPR and HIPAA. | secureframe.com |
| TerraTrue | Platform | Privacy-by-design platform that embeds privacy and AI reviews into product launch workflows. | terratruehq.com |
| Vanta | Tool | Trust management platform automating SOC 2 / ISO 27001 / GDPR evidence collection and continuous compliance monitoring. | vanta.com |
| Vendor | Type | Focus | Official site |
|---|---|---|---|
| aosphere | Knowledge | Subscription legal-risk intelligence (Rulefinder Data Privacy) from the A&O Shearman-affiliated aosphere team. | aosphere.com |
| Bloomberg Law | Knowledge | Legal research platform with dedicated privacy and data security practice centre, trackers and primary sources. | bloomberglaw.com |
| filerskeepers | Knowledge | Global data retention schedule knowledge base covering retention periods in every country. | filerskeepers.legal |
| MetaCompliance | Training | Security and privacy awareness training, phishing simulation and policy management platform. | metacompliance.com |
| OneTrust DataGuidance | Knowledge | Global regulatory research platform tracking privacy and AI laws, enforcement and guidance across 300+ jurisdictions. | dataguidance.com |
| Thomson Reuters (Practical Law / Privacy Office) | Knowledge | Legal know-how and workflow content for privacy practitioners across Practical Law and Westlaw. | legal.thomsonreuters.com |
| Vendor | Type | Focus | Official site |
|---|---|---|---|
| 2021.AI | Tool | Danish provider of the GRACE AI platform combining MLOps, observability and automated compliance reporting. | 2021.ai |
| Armilla AI | Audit/cert | Independent AI assessment, warranty and insurance provider underwriting model performance risk. | armilla.ai |
| Arthur | Tool | Model and LLM performance monitoring platform for accuracy, drift, bias and safety metrics. | arthur.ai |
| Asenion | Tool | AI compliance and assurance platform formed from FAIRLY and Anch.AI. | asenion.ai |
| BABL AI | Audit/cert | Specialist algorithmic auditing and certification firm (NYC LL144 bias audits, EU AI Act readiness). | babl.ai |
| CalypsoAI | Tool | AI security testing and inference-protection platform for validating and red-teaming model deployments. | calypsoai.com |
| Cranium AI | Tool | KPMG-incubated AI security and trust platform mapping AI pipelines and exposure (AI-BOM). | cranium.ai |
| Credo AI | Tool | AI governance platform translating policy (EU AI Act, NIST AI RMF) into measurable controls, registries and reporting. | credo.ai |
| DataRobot | Tool | Enterprise AI platform with built-in model governance, approval workflows and production monitoring. | datarobot.com |
| Enzai | Tool | AI governance platform for policies, assessments and registers, founded in Belfast. | enz.ai |
| Eticas | Advisory | Algorithmic auditing consultancy and software pioneer in adversarial/societal-impact audits. | eticas.ai |
| Fiddler AI | Tool | AI observability platform providing explainability, drift and LLM monitoring in production. | fiddler.ai |
| ForHumanity | Audit/cert | Non-profit building the Independent Audit of AI Systems (IAAIS) scheme and certified-auditor education. | forhumanity.center |
| Holistic AI | Tool | AI governance, risk and auditing platform with bias-audit heritage (NYC LL144) and EU AI Act readiness tooling. | holisticai.com |
| IBM watsonx.governance | Tool | IBM's AI governance product plus consulting services for model inventories, risk evaluation and lifecycle monitoring. | ibm.com/products/watsonx-governance |
| INQ (Law) | Advisory | Canadian law-and-consulting hybrid advising on AI governance, data law and responsible adoption. | inq.consulting |
| Lakera | Tool | GenAI security platform (Lakera Guard) defending LLM applications against prompt attacks and data leakage. | lakera.ai |
| LatticeFlow AI | Tool | ETH spin-off whose COMPL-AI framework benchmarks models for EU AI Act technical compliance. | latticeflow.ai |
| Luminos.AI | Tool | AI governance platform from the former Luminos.Law (BNH.AI lineage) team automating legal-grade AI risk reviews. | luminos.ai |
| ModelOp | Tool | Enterprise AI/model operations governance software inventorying and enforcing controls over models in production. | modelop.com |
| Modulos | Tool | Swiss responsible-AI platform operationalising EU AI Act and ISO 42001 compliance workflows. | modulos.ai |
| Monitaur | Tool | ML assurance platform recording, monitoring and auditing model decisions, strong in insurance. | monitaur.ai |
| Nemko Digital | Audit/cert | Digital trust arm of certification body Nemko offering AI trust-mark, assurance and advisory services. | digital.nemko.com |
| ORCAA | Audit/cert | Cathy O'Neil's algorithmic auditing consultancy (O'Neil Risk Consulting & Algorithmic Auditing). | orcaarisk.com |
| Protect AI | Tool | ML security platform (model scanning, AI-SPM) acquired by Palo Alto Networks in 2025. | protectai.com |
| Responsible AI Institute | Audit/cert | Member-driven non-profit providing responsible-AI benchmarks, badges and conformity assessment tools. | responsible.ai |
| Robust Intelligence | Tool | AI validation and security firm (AI Firewall) acquired by Cisco in 2024; capability continuing inside Cisco AI Defense. | robustintelligence.com |
| Saidot | Tool | Finnish AI governance platform for system registries, risk evaluation and transparency reporting. | saidot.ai |
| SAS | Tool | Analytics major offering model risk management, trustworthy-AI tooling and (via Hazy) synthetic data in SAS Data Maker. | sas.com |
| Trilateral Research | Advisory | Sociotech research consultancy delivering responsible-AI, DPIA and ethics advisory plus applied AI products. | trilateralresearch.com |
| Trustible AI | Tool | AI governance software for inventories, risk classification and regulatory alignment documentation. | trustible.ai |
| TÜViT (TÜV NORD Group) | Audit/cert | German IT-security certification body extending TÜV testing and certification into AI quality and governance. | tuvit.de |
| ValidMind | Tool | Model risk management and documentation automation platform aimed at banks and regulated financial institutions. | validmind.com |
| VerifyWise | Tool | Open-source AI governance platform for registries, EU AI Act and ISO 42001 evidence tracking. | verifywise.ai |
| WitnessAI | Tool | Enterprise AI activity-observability platform governing employee and agent use of AI systems. | witness.ai |
Featured listing
Privacy technology vendor? Enquire about a featured listing or sponsorship on this page. Get in touch.
Curated and growing — 108 tools and services across the privacy and AI governance landscape. Inclusion is informational, not an endorsement. Are you a privacy vendor? Add your organisation — listing is free and follows our published inclusion criteria, never payment. Disclosure: Just DSARS is part of the Vula group, which publishes this directory.