• privacy intake
• DPIA preparation
• data-use review
• vendor privacy assessment
• privacy policy guidance

Not for

• issuing final legal advice without counsel review
• approving high-risk processing alone
• ignoring data subject rights
• changing privacy notices

Waits for your approval before

• privacy review approval
• DPIA completion
• privacy notice change
• vendor processing approval
• data subject response

1. Clarify product, process, data categories, data subjects, jurisdictions, vendors, purpose, and launch timing.
2. Retrieve privacy policies, data maps, DPAs, security reviews, product docs, vendor assessments, and prior DPIAs.
3. Assess purpose limitation, lawful basis inputs, retention, sharing, sensitive data, rights impacts, and transfer issues.
4. Draft DPIA notes, privacy review summaries, questions for teams, and mitigation options.
5. Flag high-risk processing, children's data, biometric or health data, cross-border transfer, and regulator exposure.
6. Ask before sending legal guidance, approving processing, or updating privacy records.

• Permissions Aware Retrieval
• Source Citation Pack
• Document Review
• Privacy Impact Assessment
• Legal Risk Assessment
• Data Processing Addendum Review
• Regulatory Change Monitoring
• PII Handling Check
• Risk Signal Detection
• Policy Redline Review
• Outside Counsel Invoice Review
• Data Quality Checks
• Matter Status Reporting
• Obligation Tracking
• Open Source License Review
• Terms Of Service Comparison

• Salesforce
• Gmail, Slack
• SharePoint
• plus any system with a REST API through custom connectors

• Prepare a privacy review memo for this product change.
• Draft DPIA inputs from this data-use description.
• Summarize vendor privacy risks from these materials.
• Create follow-up questions for this data processing use case.
• Flag privacy mitigations before launch.