TrustOS workspace
Used by authorised organisational teams to configure the programme, manage work, coordinate actions, and review evidence.
Product overview
A practical platform for managing DPDPA responsibilities.
TrustOS connects the records, workflows, people, and system actions involved in a DPDPA programme.
The platform is designed to help an organisation understand its personal data processing, communicate clearly with Data Principals, manage requests, coordinate operational actions, and retain evidence of the work completed.
How TrustOS supports the operating process
Understand the data environment
Create an organised view of business domains, applications, databases, files, processors, data categories, and processing activities.
Use discovery and review workflows to identify where personal data is processed and where further validation is required.
Define the processing purpose
Record the purpose, relevant personal data, applicable processing ground, responsible team, processor involvement, and retention requirement.
Keep changes versioned so that the organisation can review what applied at a particular time.
Prepare and publish notices
Draft clear notices that describe the personal data involved, the purpose of processing, the service being provided, available rights, and the organisation's contact channel.
Manage notice versions and the languages selected for the implementation.
Manage consent where it is required
Configure the consent experience, record the decision, preserve the related notice version, and provide an accessible withdrawal process.
Use the Privacy Centre to give the Data Principal a clear place to review preferences and available service channels.
Handle rights and grievances
Receive requests through a controlled intake process. Verify the request, assign responsibility, track the response period, coordinate work, communicate with the Data Principal, and record closure.
Supported workflows can cover access to information about personal data, correction, completion, updating, erasure, grievance redressal, and nomination.
Carry out required system actions
Create controlled jobs for erasure, suppression, retention, or another configured action across relevant connected systems.
Track execution, exceptions, retries, and available verification so that the operational record reflects what was actually completed.
Respond to personal data breaches
Record the incident, affected data, likely impact, affected Data Principals, response decisions, communications, remediation, and reporting activity.
Support immediate response and intimation requirements while tracking the information required for detailed reporting.
Maintain governance and evidence
Maintain processor records, impact assessments, processing records, remediation work, audit material, and management reporting.
Prepare evidence packages from approved records without changing the underlying operating history.
Product capability areas
Workspace and oversight
Review current obligations, assigned work, pending requests, incidents, evidence, and programme status.
Personal data inventory
Maintain business domains, systems, stores, data categories, ownership, processing activities, and data movement records.
Purposes and notices
Manage processing purposes, data categories, applicable grounds, retention, notice content, versions, and publication status.
Consent management
Configure consent experiences, record decisions, support withdrawal, review history, and maintain tamper evident records.
Privacy Centre
Give Data Principals a dedicated place to manage consent, submit requests, raise grievances, and review available information.
Rights and grievance operations
Manage intake, verification, assignment, status, communication, response work, approval, and closure evidence.
Retention and erasure
Define retention rules, review expiry conditions, create actions, manage exceptions, and record completion.
Connectors and operational actions
Connect selected business systems, map relevant data, carry out configured actions, and retain available verification details.
Personal data breach operations
Manage incident records, response steps, communication, reporting information, remediation, and review evidence.
Processors and governance records
Maintain processor details, service relationships, responsibilities, review records, contractual references, and oversight activity.
Impact assessments and risk
Document higher risk processing, assess potential impact on Data Principals, assign remediation, and retain review decisions.
Evidence and reporting
Generate approved operational reports and evidence packages for management, legal review, audit, or regulatory response.
Administration and access
Manage tenants, users, roles, permissions, configuration, activity records, and implementation settings.
Two working surfaces for two different users.
Privacy Centre
Used by Data Principals to review available information, manage consent, submit requests, raise grievances, and use other configured service channels.
Review the complete operating journey.
The product tour follows the sequence from personal data mapping and purpose definition through consent, rights handling, system action, risk review, and evidence.