DataGrail

DataGrail is a San Francisco-headquartered software company that sells an enterprise data privacy platform to legal, privacy and security teams. Its product set spans four areas the company describes as the pillars of privacy management: data discovery and mapping (Live Data Map, plus ML-based discovery and classification of PII and sensitive personal information across cloud and on-premise sources), data subject request management (Request Manager, which automates access and deletion requests across third-party SaaS applications and internal data stores), consent management (cookie and tracker compliance, region-aware consent banners, iOS and Android SDKs, Google Tag Manager and Google Consent Mode support), and privacy risk assessment (Risk Register / Risk Monitor, with auto-populated DPIAs, PIAs and third-party assessments, and dynamic RoPA generation).

As of the current website, DataGrail positions the offering as an "Agentic Data Privacy Platform" built around Vera, an integrated AI agent that is described as detecting and investigating new cookies, suggesting and applying consent rules on approval, drafting evidence-based PIAs, DPIAs, AI risk assessments and TIAs, flagging risks across 22,000+ applications, and producing reports on demand. The company states Vera operates under user permissions, takes only approved actions and does not train on customer data.

Supporting capabilities cited by the company include a network of 2,500+ integrations, patented system detection that identifies systems not connected to SSO, full audit logging, a public API, webhooks, workflow automation, role-based access control, multi-brand support, global policy management, anonymized discovery and an optional customer-hosted AWS deployment. DataGrail also offers managed services and pairs customers with a named human privacy expert for onboarding and ongoing program work, and runs a Privacy Roundtable community and a library of free privacy tools and AI prompts.