PRIVASTU
Privacy + AI governance operating system

Build the Bigger
Privacy Picture.

Connect discovery, decisions, delivery and evidence across one intelligent operating system.

Complete · Intelligent · Privacy Management
DPOLegalCISO
Query

Ask richer role, sector, geography and scenario-aware questions.

Board-ready brief
84Connected posture
20+connected modules
291programme controls
19assessment templates
3connected programmes

One Platform. Total Intelligence. One Bigger Picture.

PrivacyAI governanceProgramme deliveryDecision intelligenceBoard evidence
The connected command centre

From the global picture to the next accountable action.

Every signal is connected to a record, owner, decision, deadline and output. The dashboard is not a decorative layer. It is a route into governed work.

Global Data MapLive cross-module intelligence
● Live
UK3 actions
EUAI readiness
Risk postureConnected control health
76Moderate
Rights AI Vendors
Decision queueAdvice routed into action
◇
AI vendor onboardingAI Governance
High→
◇
Cross-border transferData Mapping
Review→
◇
Worker monitoring DPIAAssessment Manager
Due→
Programme timelineDiscover to measurable assurance
✓Discover
✓Assess
✓Design
4Implement
5Validate
Value beyond the suite

Four layers. One evidence spine.

The challenger position is not that established suites have no capability. It is that PRIVASTU joins more kinds of value around the same governance work.

01

Governance core

Authoritative assets connected to processing, assessments, rights, vendors, policies, retention, incidents and AI records.

02

Delivery system

Plans, milestones, dependencies, RACI, sprints, evidence gates and executive cadence.

03

Decision intelligence

Strategic lenses, horizon signals, geographic context, scenarios and recommended action.

04

Connected evidence memory

A growing library of source records, decisions, chronology and outcomes that supports better questions and wider business decisions.

The value equation

Necessary compliance activity becomes a reusable governance and intelligence asset.

v69.2 · Connected Assets & Evidence

One asset. Every relevant relationship. One defensible picture.

The Information Asset Register is not an isolated inventory. It is the shared evidence spine that lets a change in an asset inform the records, owners, risks, actions and reports that depend on it.

RELATIONSHIPS & EVIDENCE

Select a connected module

10 governed relationships
✺
CONNECTED RELATIONSHIP

AI Governance

Linked

AI system trains on, retrieves or produces the asset

Context brought forward

System, model, dataset, agent, lifecycle gate and evidence

→
Governed outcome

AI risk classification and deployment assurance

Named ownerSource recordEvidence libraryDecision chronologyGap action
Current demonstrator scope

The live v69.2 HTML preserves connected records in the user's current browser. Authenticated shared databases, enterprise connectors and cross-device synchronisation form part of production full-stack deployment, not a claim made for this standalone demonstration build.

20+ connected modules · 26 operational screens · one evidence model

One Platform. Every Team. One Bigger Picture.

Search the current product architecture and open any module to inspect its controls, reports and measurable outcomes.

P
Command module

PROPELLOR™ Programme Hub

A coached multi-programme delivery system joining the 291-control privacy transformation plan, the 150-control AI Governance programme and the Data Retention implementation pathway through common owners, evidence, dependencies, milestones and executive cadence.

Run privacy, AI Governance and Data Retention as owned, phased and measurable programmes.
Controls and actions
  • + Multi-programme command centre
  • + 36-month programme plan
  • + Gantt and calendar
  • + Twelve 90-day AI sprints
  • + RACI and dependencies
  • + Action queues and chases
  • + Evidence gates
Report outputs
  • ▤ Full programme plan
  • ▤ Executive steering report
  • ▤ 90-day sprint report
  • ▤ AI Governance programme roadmap
  • ▤ Data Retention implementation report
  • ▤ Overdue and at-risk register
  • ▤ RACI report
  • ▤ Evidence report
Measures and proof
  • ◎ Control completion
  • ◎ Milestone delivery
  • ◎ Evidence coverage
  • ◎ Ownership completeness
  • ◎ Maturity movement
Open product experience ↗
The intelligence layer

Governed context makes every later question more useful.

Evidence becomes memory. Memory improves decisions. PRIVASTU connects operational facts, strategic lenses and role-aware questions without claiming that the system trains itself.

CP
Role lensChief Privacy Officer
Ask PRIVASTU

Where is privacy maturity moving in the wrong direction?

Connected signals

RoPA · DSAR · Policies · Vendors · Incidents · Learning

Decision output

Maturity scorecard with trend movement, affected functions and a sequenced intervention plan.

PContext
SWOTPESTLESOARSTEEPLETOWSPORTERVRIOCOMBINED
Eight strategic lenses

The selected framework changes the analysis. It does not merely relabel the same generic answer.

01

More governed facts

Systems, data, vendors, laws, risks and evidence connect.

02

Richer query context

Role, sector, geography and dependency sharpen the question.

03

More precise implications

Analysis distinguishes urgency, opportunity and affected populations.

04

Actions become evidence

Recommendations gain owners, dates, decisions and outcomes.

05

Patterns become reusable

Saved pathways and completed programmes build decision memory.

PROPELLOR™

Programme the programme. Then prove the change.

A 0 to 36-month coached multi-programme system for Privacy Transformation, AI Governance and Data Retention with best-practice delivery views and evidence built into every stage.

291 controls12 domains36 months4 phases
Foundation M1-12Operationalisation M13-24Maturity M25-36
Accountability baseline
RoPA and mapping
Assessment programme
Vendor assurance
AI governance
Learning and culture
▤ Executive Steering▤ 90-Day Sprint▤ Overdue and At-Risk▤ RACI▤ Evidence▤ Compliance
The complete AI Governance operating environment

From first signal to governed deployment.

PRIVASTU brings the AI estate, 150-control delivery programme, evidence, people, infrastructure, regulatory intelligence and executive assurance into one connected operating environment. It is designed to support accountable judgement, not replace it.

PRIVASTU AI GOVERNANCE HUB

One estate. One control spine. Every decision connected.

The Hub joins discovery, inventory, assessment, controls, evidence, human assurance, technical infrastructure, change and deployment. Each workspace operates on the same governed context so a finding can become an owned action then a measured control and finally a defensible report.

27connected workspaces
150operational controls
15governance domains
46report types
LIVE OPERATING MODEL Evidence connected
01

DiscoverUse, data and dependencies

02

DecideClassify, assess and approve

03

DeliverControls, owners and evidence

04

DeployGate, monitor and change

05

AssureTest, report and improve

Systems & agentsControls & evidencePeople & accountability
EU AI ActIAPP AIGPISO/IEC 42001NIST AI RMFOECD AI PrinciplesPrivacy & Data Protection
EXPLORE THE OPERATING ENVIRONMENT

Twenty-seven workspaces. One governed context.

Create the governed AI estate and make current exposure visible.

Executive command viewStart & Operate

Executive Dashboard

Track programme maturity, accountable ownership, evidence and unresolved exposure across the full AI governance environment.

What teams can do
  • +Portfolio posture and decision queues
  • +Maturity across 15 governance domains
  • +Control, evidence and ownership signals
  • +Direct routes into the work behind each metric
What becomes visible
  • ◎Board focus
  • ◎Clear escalation
  • ◎Visible accountability
PRIMARY OUTPUT▤ Executive AI Governance Dashboard
THE DELIVERY BACKBONE

150 controls. Fifteen domains. Twelve 90-day sprints.

A configurable 36-month programme translates AI governance into owned work. Every control can carry the question, objective, actions, owner, RACI, dependencies, legal and framework references, evidence, progress, residual risk and next step needed to run it.

4delivery phases
12focused sprints
150mapped controls
1evidence chain
The sequence can be accelerated or adjusted to fit organisational risk, maturity and adoption. Legal mappings remain reference fields and should be checked for current applicability.
01
Assess & Mobilise

Establish the estate, accountability, risk appetite and baseline.

02
Design & Remediate

Define the operating model then close priority control gaps.

03
Implement & Integrate

Embed controls, evidence and cross-functional workflow.

04
Assure & Optimise

Test effectiveness, report posture and improve the programme.

FIFTEEN CONTROL DOMAINS

Deep enough for specialists. Connected enough for leaders.

The control model spans governance, rights, high-risk systems, data, technical documentation, human oversight, safety, GPAI, supply chain, operations, incidents, literacy and assurance.

01Strategy, Accountability & Governance
02AI Inventory, Scope & Classification
03Legal, Regulatory & Rights Applicability
04Prohibited Practices & Fundamental Rights
05High-Risk AI System Controls
06Data Governance, Training & Testing Data
07Technical Documentation, Records & Evidence
08Human Oversight, Transparency & User Controls
09Accuracy, Robustness, Safety & Cybersecurity
10General-Purpose AI & Foundation Models
11Third-Party, Procurement & Supply Chain
12Deployment, Monitoring, Change & Decommissioning
13AI Incident, Issue & Corrective Action Management
14AI Literacy, Culture & Competence
15Assurance, Audit, Metrics & Board Reporting
HUMAN SYSTEM

Govern adoption and hidden risk.

Track behavioural risk, sustained use, workforce confidence, AI literacy and whether human reviewers have the expertise, time, authority and psychological safety to challenge a system.

Hidden-risk registerWorkforce pulseHuman oversightAdoption maturity
CHANGE & RELEASE

Know when assurance must move again.

Model, prompt, RAG, vendor, API, data, permission, autonomy, purpose and region changes can trigger proportionate reassessment before a documented GO, CONDITIONAL GO or HOLD decision.

Change recordTriggered assessmentReadiness gateDecision evidence
INTELLIGENCE & OUTPUTS

One dataset. Forty-six report types.

Fifteen role packs, 75 governed questions and seven strategic lenses help teams interrogate live context then produce executive, governance, discovery, infrastructure and human-assurance outputs.

18 Governance10 Discovery10 Infrastructure08 Human & change
GLOBAL INFRASTRUCTURE INTELLIGENCE

See the architecture behind the AI system.

Open the working map to select infrastructure nodes, trace governed flows, inspect sovereignty routes, simulate concentration and resilience scenarios then move directly into the supporting register and reports.

Privacy transformation

12 domains → 291 controls → ownership → delivery → assurance

+
AI governance programme

15 domains → 150 controls → twelve sprints → deployment assurance

+
Data retention programme

Inventory → rules → holds → disposition → destruction evidence

The complete PRIVASTU Report Studio

Every report. Premium by default.

Every named report and governed output across 20+ connected modules and 26 operational screens is individually available, including the complete 46-report AI Governance portfolio and the v69.2 Asset Evidence Pack. Open any item as a high-end executive edition, switch to structured working detail then download a standalone premium HTML or print it to PDF.

141premium reports and outputs
46AI Governance reports
20+connected product modules
100%premium presentation

Premium output readyEvery template carries executive summary, metrics, findings, decisions, actions, evidence and interpretation guardrails.

PRIVASTU
Premium board intelligence

Privacy + AI Governance Board Pack

Connected posture · decisions · evidence · next action

P
POLISHED REPORT · LIVE GOVERNED DATA
Programme posture76 / 100
AMBER
AI lifecycle evidenceHighOwner assigned
Vendor assuranceMedium2 overdue
Rights performanceStableWithin SLA
Retention deploymentReviewSprint 3
PREMIUM REPORT LIBRARY

Find the exact output for the decision.

Showing 12 of 141 matching reports
◉ PREMIUM
PV-GOVE-001 · Governance

Board Privacy and AI Pack

A concise RAG view of material risks, live measures, decisions required and DPO commentary.

Prepared forBoard, executive leadership, DPO and governance owners
● Live governed dataQuarterly
◎ PREMIUM
PV-OPER-002 · Operational

DSAR Performance

Response time, backlog, verification, extensions and escalation across the rights pipeline.

Prepared forOperational owners, privacy teams, programme leads and assurance
● Live governed dataMonthly
! PREMIUM
PV-COMP-003 · Compliance

Incident and Breach Register

Chronology, 72-hour status, notification decisions, root causes and remediation evidence.

Prepared forDPO, legal, compliance, audit and accountable control owners
● Live governed dataMonthly
▣ PREMIUM
PV-COMP-004 · Compliance

RoPA Executive Summary

Processing coverage, legal bases, sensitive data, transfers and DPIA triggers.

Prepared forDPO, legal, compliance, audit and accountable control owners
● Live governed dataAnnual / on change
⬡ PREMIUM
PV-COMP-005 · Compliance

Vendor Risk Report

Risk tiers, DPA coverage, due diligence, fourth parties and unresolved assurance.

Prepared forDPO, legal, compliance, audit and accountable control owners
● Live governed dataQuarterly
★ PREMIUM
PV-OPER-006 · Operational

Learning and Capability

Completion, pass rates, overdue learners and high-risk role coverage.

Prepared forOperational owners, privacy teams, programme leads and assurance
● Live governed dataMonthly
◇ PREMIUM
PV-COMP-007 · Compliance

DPIA and Assessment Register

High-risk assessments, DPO advice, approvals, reviews and consultation triggers.

Prepared forDPO, legal, compliance, audit and accountable control owners
● Live governed dataQuarterly
✺ PREMIUM
PV-GOVE-008 · Governance

AI Governance and Assurance

Portfolio posture across systems, agents, assessments, controls, evidence, people, infrastructure and deployment readiness.

Prepared forBoard, executive leadership, DPO and governance owners
● Live governed dataQuarterly
≣ PREMIUM
PV-GOVE-009 · Governance

Policy Compliance

Policy coverage, approval, attestation, scheduled review and mapped control gaps.

Prepared forBoard, executive leadership, DPO and governance owners
● Live governed dataQuarterly
✓ PREMIUM
PV-COMP-010 · Compliance

Consent and Preferences Audit

Proof integrity, expiry, withdrawal, suppression and purpose alignment.

Prepared forDPO, legal, compliance, audit and accountable control owners
● Live governed dataAnnual / on change
⌛ PREMIUM
PV-COMP-011 · Compliance

Retention Schedule Audit

Schedule coverage, deletion, exceptions, legal holds and system implementation.

Prepared forDPO, legal, compliance, audit and accountable control owners
● Live governed dataAnnual
◌ PREMIUM
PV-GOVE-012 · Governance

Regulatory Horizon

Legislative change, regulator signals, AI milestones and action deadlines.

Prepared forBoard, executive leadership, DPO and governance owners
● Live governed dataQuarterly
Toolkits and pathways

Decisions can be coached, built, reused and proved.

Guidance appears at the point of judgement. Teams can run existing pathways or build their own visual decision trees without losing expert review.

Tree Builder
QUESTIONDoes the proposed use create high risk?
YES
REQUIREDLaunch assessment pathway
UNCLEAR
RECOMMENDEDRoute to expert review
NO
CONTROLLEDRecord rationale and monitor
◇

Lawful Basis Finder

Article 6 guided decision

◇

DPIA Trigger Tool

High-risk processing triage

◇

Retention Calculator

Reasoned period and action

◇

Breach Notifier

72-hour decision pathway

◇

Transfer Safeguard Checker

Chapter V control route

◇

Custom Tree Builder

Your method. Preserved and reusable.

Change the buying criteria

One Platform. From Governance to Advantage.

Category leaders proved the suite. PRIVASTU expands the value equation with a clearer operating model for turning governance work into delivery, intelligence and reusable evidence.

Traditional module suite
RegistersAssessmentsRightsConsent
PRIVASTU operating system
Governance coreProgramme deliveryDecision intelligenceCommercial memory
Buying considerationTraditional suite patternPRIVASTU design response
ArchitectureModules can behave like separate productsOne evidence model and consistent interaction pattern
AdoptionConfiguration before meaningful outputPrebuilt pathways, examples and a 0 to 36-month programme
Decision supportDashboards and static registersRole prompts, strategic lenses and decision trees
Programme deliveryManaged outside the productGantt, board, calendar, cards, RACI and evidence gates
ReportingManual compilation and presentationStructured and polished reports inside the workflow
AI governanceAdditional specialist productPrivacy and AI on one accountability spine
Business valueCompliance records remain compliance recordsGoverned context supports wider strategic questions
RelationshipRemote software and ticket queuesPractitioner-led transformation and responsive support
P
Practitioner-built category architecture

Designed from the regulator, DPO and operator side of the table.

PRIVASTU embeds the perspective of a former Information Commissioner and senior Group DPO with years spent buying, testing and operating privacy technology. The result is software shaped around the work that must actually be completed and the evidence leaders must be able to defend.

01 Regulator-grade accountability02 Practitioner-led workflows03 Board and investor clarity
Explore the campaign suite

Choose the story for the audience in front of you.

Move from a rapid mobile product view to a complete investor and strategic buyer narrative. Every walkthrough is mobile-first and independently shareable.

01

Mobile product experience

A polished mobile-first view of the wider PRIVASTU product.

Open mobile.BETA →02

Product overview

A guided explanation of the connected platform and its operating model.

Start overview →03

Value beyond the suite

The challenger case for programmed delivery, intelligence and evidence.

Explore the value →04

Investor and strategic buyer

The category thesis, compounding value and acquisition logic.

Open investor view →
The next operating model

One Smart Platform. One Informed Community. Better Together.

See how PRIVASTU can connect the work, coach the programme and turn governed context into better decisions.

Open mobile.BETA ↗