Services

One system. Every step traceable.

From the first finding to the documented result, you get a clear, verifiable process – for data broker erasures, access requests and objections.

Data-minimising processingTraceable status history

The process in four steps

Create order

Securely record a person, domain, e-mail address or advertising document. Only the details the order requires.

Check sources

Bring findings and known leak alerts together in a structured way – with source, timestamp and risk classification.

Trigger case

Create access, objection or erasure requests from vetted templates and send them with a reply deadline.

Track status

Document replies, deadlines, evidence and re-checks transparently – until the case is closed.

What you see

No black box.

Every finding receives a source, timestamp, risk classification and status. This keeps it clear what was actually found and what is still being checked.

Status values of a finding: suspected, found, requested, confirmed, erasure reported, re-checked, not removable, closed.

Finding #DS-2048Requested
Source
Data broker directory
Data types
Name, address, phone number
Next step
Monitor reply deadline
Case types

Which cases we handle.

Every case has an owner, handler, status, priority, deadline, event history, communication and evidence.

Access & origin

Access request under Art. 15 GDPR: What data is held, where does it come from, who was it passed on to? Origin requests for unwanted advertising.

Start case

Objection & erasure

Objection to advertising under Art. 21 GDPR and erasure requests under Art. 17 GDPR to data brokers, directories and platforms – with re-check.

Start case

Advertising fax & advertising e-mail

Upload unwanted advertising, capture the sender via text recognition, file an origin request and objection, document replies and deadlines.

For businesses
Leak check

Make known data leaks visible.

We compare e-mail addresses and verified domains server-side against known data leaks. You see the leak name, date, affected data classes, a risk classification and a specific recommended action. Only you and your responsible case handler see the results.

Check password locally
Frequently asked questions

Questions about the process.

What is an access request under Art. 15 GDPR?

Anyone can find out from a company whether and which personal data is processed there, where it came from and to whom it was passed on. We create the request from a template, send it and monitor the statutory reply deadline of one month.

How does an erasure request to a data broker work?

We record the finding with evidence, file the erasure request under Art. 17 GDPR with the provider, document the reply and re-check whether the data has actually been removed. If the provider fails to act, we record this in a traceable way.

What happens if an other party does not reply?

The case remains open with the deadline exceeded. You can see all steps and evidence and can use them to lodge a complaint with the competent supervisory authority. We do not provide legal advice.

How long does a case take?

Statutory reply deadlines are usually one month. We store a deadline for each case type, remind you in good time and carry out re-checks until the case is closed.

What evidence is stored?

Screenshots, PDFs, e-mails (EML) and reply letters. Every file is scanned for malware before release and stored in a private repository that can only be accessed via short-lived, signed links.

Get started

The first case is set up in a few minutes.

Register for free, store a finding or e-mail address and see immediately what needs to be done.

Start case