Atlas Privacy Manager Features

Curious what Atlas Privacy Manager can do for you? You’re in the perfect place. Explore 200+ features crafted to put you firmly in control of your data privacy compliance journey.

Discovery

Connectivity and Coverage

Connections

Create custom and secure connections to your systems right from the dashboard.

Operating Systems

Wide support for multiple operating systems including Windows and Linux.

Databases

Support for all major databases including MySQL, MariaDB, Oracle, SQL Server, and PostgreSQL.

Cloud Storage

Discover and classify personal data stored across popular cloud providers like AWS, Azure, and Google Cloud.

Agentless Scan

Deploy agentless scanning with secure credentials – no installation or endpoint configuration required leading to faster compliance and lower costs.

Connection Test

Validate and monitor your connections before each scan to ensure uninterrupted and secure discovery operations.

Pause and Restart

Automatically restart if there are connection issues midway during a scan preserving up to the minute scan results.

Scanning Approach

Full Scan

Perform comprehensive system-wide scans to discover every instance of personal and sensitive data across all connected sources.

Delta Scan

Run incremental scans to identify only new or modified data since the last scan, saving time and resources.

Meta Data Scan

Analyse data attributes, schemas, and file metadata without reading file contents—ideal for high-speed classification.

Random Sample Scan

Perform statistical sampling on large datasets to validate data categories or audit for potential privacy risks.

Scan Files

Identify and classify personal data within structured, semi-structured, and unstructured file formats.

Scan Images

Leverage OCR and AI models to detect text and PII within scanned documents, photos, or ID images.

Scan Databases

Automatically map and scan database tables, fields, and records for personal and sensitive data.

Exclusion Rules

Create filters to skip specific systems, files, or data types during scans.

Scheduling

Automate scan frequency with flexible scheduling and notification options.

Data Intelligence and Insights

Personal Data

Automatically detect and flag personal data in alignment with DPDPA categories.

Categorisation

Group discovered data into meaningful categories such as personal, financial, educational, or health data for easier policy mapping.

Classification

Assign custom classification labels—public, internal, confidential, or restricted—to each discovered dataset.

File Formats

Support for all major file types, including PDFs, Excel, CSVs, emails, and archives.

Confidence

AI-driven confidence scoring to indicate how certain the system is about each detection.

Risk Scoring

Calculate risk levels based on data sensitivity, density, and frequency across multiple vectors.

Multi-language Detection

Identify personal data in local Indian languages (e.g. PII in electricity bills in local language).

Data Lineage

Trace the origin and flow of personal data across systems to ensure transparency and accountability.

Policy Mapping

Map discovered data categories directly to policy groups and purpose groups for each defined system.

Compliance and Governance

Consent Correlation

Link discovered data back to consent records to validate lawful processing.

Audit Logs

Maintain detailed logs of all scan activities for audit and compliance verification.

Notifications

Get real-time alerts to system owners and DPO teams if violations are found during scheduled scanning.

Scan Report

Generate detailed reports highlighting discovered data, risk scores, and compliance insights.

Scan Trends

Track discovery patterns and trends over time to measure improvements or detect anomalies.

Performance and Integration

Speed

Optimised scanning engine designed to handle terabyte-scale data at great speeds. Internal tests show over 100 files per second and 20 images per second.

Accuracy

Machine learning models continuously trained on Indian ID documents to improve detection precision and reduce false positives.

Scan Export

Export scan results to CSV for further analysis or integration with compliance dashboards.

Scan Import

Import existing scan results or third-party discovery data to maintain details in a single dashboard.

Assessment

Assessment Design & Management

Design Assessments

Build assessments tailored to your organisational needs.

Add Sections

Include single choice, multiple choice, or freehand text questions.

Preview Templates

Review assessments before sending them out.

Clone Assessment

Duplicate existing assessments to save time.

Maker and Checker Review

Ensure quality and accuracy with a two-step review process.

Prebuilt Risk Questionnaires

Ready-to-use templates for privacy, vendor, contractor, and employee assessments.

Scoring & Risk Analysis

Score Questions

Assign scores to each question for quantitative evaluation.

Question Weightage

Set the importance of each question towards the final assessment score.

Granular Options Risk Scoring

Assign high, medium, or low risk to each response option.

Aggregate Scoring

View cumulative scores for the entire assessment.

Assessment Deployment & Tracking

Bulk Assessments via CSV

Upload multiple recipients to send assessments at scale.

Privacy, Vendor, Contractor, Employee Assessments

Conduct assessments for any stakeholder group.

Detailed Response Review

Analyse data collected, processed and shared in a simplified summary view.

Risk Visualisation

Quickly identify high, medium, and low-risk areas at a glance.

Reporting & Insights

Graphs

Interactive visual representation of results at a glance.

Download PDF Report

Shareable and professional assessment reports.

Download Data

Export raw assessment data as a CSV file for further analysis.

AI-Powered Reporting

RAG Report Generation

Automatically combines collected responses with contextual knowledge to produce comprehensive reports.

Risk Posture Overview

Provides overall scores and highlights high, medium, and low-risk areas.

Contextual Summaries

Summarises key findings from data collection, processing, sharing, storage, and protection practices.

Remediation Guidance

Recommends actions to address identified risks and improve compliance posture.

Compliance Posture Insights

Evaluates organisational readiness against DPDPA requirements.

Downloadable Reports

Export reports as PDF or CSV for stakeholders and further analysis.

Detailed Response Breakdown

Access granular data for each participant, including sensitive data handling and processing activities.

Additional Features

Automated Alerts

Notify stakeholders of overdue or incomplete assessments.

Trend Analysis

Track compliance improvement over time.

Integration APIs

Connect assessment results to third party risk management tools.

Systems Management

Manage where data is collected, how it is shared with other systems, the purposes for processing and the processing frequency, while maintaining control and compliance.

System Registration & Onboarding

Add Single System

Add Multiple Systems

Bulk-import systems via CSV from tools such as Active Directory.

Maker & Checker Review

A two-step review workflow for accuracy.

System Mapping & Relationships

System Map

Shows how systems are linked through data sharing.

System Links

Connects systems into a visual network of data flows.

Data Map

Generates a data map from policy and purpose groups.

Policy & Purpose Management

Policy Creation

Defines what data is collected, processed, stored, and shared.

Import Policy Groups

Bulk-creates and attaches policy groups using Excel templates.

Purpose Creation

Defines the purposes for collecting and processing data.

Import Purpose Groups

Bulk-creates and attaches purpose groups using Excel templates.

Purpose Category

Sets categories and descriptions for purposes, including goods or services.

Vendor & Third-Party Management

Add Vendor

Adds third-party vendors that handle personal data.

Vendor Risk Assessment

Triggers DPDP-related assessments during vendor onboarding.

Data Classification & Attributes

Data Categories

Defines categories such as personal, financial, health, and educational.

Data Attributes

Specifies attributes such as name, address, bank account, and ID numbers.

Define Frequency

Sets processing frequency for each data type.

Discovery Input

Defines data attributes from data discovery output.

Advanced Features

Automated Alerts

Notifies system owners of incomplete policies, purposes, or mappings.

Integration APIs

Connects system metadata to Consent, Assessment, and ROPA modules.

Audit Trail

Tracks changes to systems, policies, purposes, and vendor details.

Cookies

Scan, categorise and manage cookies across domains to meet data protection obligations, and let end users make consent choices in real time.

Sites (Domain) Management

Add Domains and Subdomains

Unified Dashboard

See all sites, their scan status, and cookie compliance posture in one view.

Cookie Scanning and Discovery

Automated Cookie Scanning

Scan domains and subdomains for cookies set by the site and third-party scripts.

Auto Classification

Sort cookies into Essential, Analytics, Marketing, and Others using AI-based detection.

Detailed Cookie Report

Produce a report listing each cookie's provider, duration, and purpose.

Schedule Scanning

Run site scans periodically.

Banner and UI Design

Custom Banner Designer

Create multilingual, brand-aligned banners in a simple editor.

Dynamic Cookie Population

Update category and cookie counts in the banner from the latest scan.

Flexible Layout Options

Choose a bottom bar, modal, pop-up, or corner widget, and set its prominence.

Consent and Preference Management

Cookie Settings Panel

Let users accept or reject specific cookie categories before they activate.

Proof of Consent

Record each consent event, its timestamp, and the user's preferences as verifiable proof.

Preference Change Panel

Let users revisit and change their cookie choices at any time.

Cookie Logs and Automation

Cookie Logs

Keep detailed logs of cookie activity, consent events, and banner interactions.

Conditional Activation

Activate cookies by category, only after user consent.

Scheduled Deletion

Delete cookies automatically after expiry or at set intervals.

Processing Activities

Get visibility into organisational data processing, capturing and validating each activity through API integrations or file inputs to support compliance.

Data Processing Capture

Consent Checks

Confirm valid consent exists before any personal data is processed.

Processing Log

Keep a central log of processing activities, recorded automatically through API integrations.

API Integrations

Connect the platform to internal applications, CRMs, and third-party platforms through RESTful APIs.

File Imports

Upload processing logs for legacy or regulated systems that can't support APIs, using custom mapping templates.

Manual Scheduling

Record recurring internal activities, such as payroll or billing, through a simple interface.

Compliance and Validation

Policy Violation Detection

Flag processing events that don't match approved policies or declared purposes.

Data Sharing Violations

Detect and alert on personal data shared with unlinked or unauthorised systems.

Processing Review Dashboard

View all processing activities, their purposes, associated systems, and consent status together.

Audit Evidence

Generate verifiable evidence trails for each activity.

Notifications

Receive instant alerts for non-compliant or unregistered processing.

Reporting and Analytics

Activity Reports

Generate detailed reports on frequency, purpose, and associated systems.

Downloadable Reports

Export reports to CSV for analysis, sharing, or offline review.

Processing Trends

Analyse historical activity to spot anomalies or compliance risks.

Audit Summaries

Produce summaries ready for internal governance or regulatory submission.

Automated ROPA Generation

Create and send Records of Processing Activities when data principals request them.

Advanced FeaturesComing soon

Planned automation and integrations to strengthen oversight.

AI-Based Pattern Detection

Use machine learning to identify unusual processing or possible misuse of personal data.

Custom Rules

Define organisation-specific rules that trigger alerts or stop non-conforming activity.

Automated Workflows

Trigger follow-ups such as consent renewals, policy reviews, or DPO notifications from activity logs.

Requests & Grievances

Customers can exercise their data rights easily, and each request is automated from start to closure with audit trails, role-based assignment and compliance support.

Request Management

Centralise all user-initiated requests in one secure dashboard.

Request Types

Covers major categories, such as consent preferences, correction, erasure, consent withdrawal, and processing activities.

Request Forms

Branded forms can be designed and published with a built-in designer.

Integration Ready

Forms can be embedded in web or mobile apps through an API.

Request Tracking

Each incoming request is registered automatically with a unique ID.

Status Updates

Live status indicators show whether a request is pending, in progress, or resolved.

Workflow & Automation

Automate assignments, notifications, and approvals with a full audit trail.

Automated Routing

Requests go to the right owner or department based on rules or request type.

Automate ROPA Requests

Processing activity requests from data principals can be fully automated.

Email Notifications

System owners are notified when requests are created, assigned, or updated.

Add Notes

Users can add comments visible to dashboard staff handling the request.

Timely Resolution Alerts

Automated reminders help meet statutory timelines.

Compliance & Auditability

Handle every request in line with DPDP obligations.

Audit Logs

Every action is logged with timestamps and user activity.

Record Retention

Request data and correspondence are kept for seven years.

Evidence Reports

Reports show the full lifecycle of each request.

Access Controls

Role-based permissions restrict viewing and editing.

Automated Acknowledgement

Data principals receive confirmations of submission and progress.

Grievance Redressal

Manage grievances through defined workflows, timelines, and documentation.

Grievance Forms

Custom forms are built with the same request form designer.

Central Dashboard

All grievances appear in one interface with filters and search.

Assignment & Escalation

Grievances go to a grievance officer and escalate automatically if unresolved.

Timeline Tracking

Resolution timelines are configurable, and SLA adherence is monitored.

Transparent Closure

The resolution is recorded and communicated to the user.

Advanced FeaturesComing soon

Advanced automation and analytics.

Bulk Uploads

Existing requests or grievances can be imported from CSV files.

Custom Workflows

Multi-stage approvals and escalations can be defined.

Analytics Dashboard

Volume, type, and resolution metrics are visualised.

API Integrations

Atlas connects with CRM, HR, and ticketing systems.

Breach Management

Breaches are detected, reported, and resolved on time, in line with the DPDP Act.

Breach Registration

Register a Breach

Incidents are logged through a guided form in the dashboard.

Two-Step Workflow

Step one registers the breach; step two notifies principals, authorities, and internal stakeholders.

Collaborative Reporting

Any authorised user can complete and update breach details.

Breach Reporting

Comprehensive Breach Form

Captures the nature, cause, timing, location, and impact.

Dynamic Fields

Details are pre-filled from linked systems and templates.

Continuous Updates

Records stay editable as new information arrives.

Audit Trail

Every change is recorded in timestamped logs.

Notification Management

Notification Workflow

After reporting, notices go to principals, the Data Protection Board, and internal stakeholders.

Design Templates

Stakeholder-specific templates are built in the Designer.

Auto-Fill Templates

Breach details populate template fields automatically.

Approval Process

Notices pass a maker-checker review before sending.

Stakeholder Communication

Data Principals

Affected individuals are notified promptly with steps to reduce harm.

Data Protection Board

A regulatory report is generated for submission within 72 hours, and updates can be shared.

Internal Stakeholders

Management and legal teams receive structured alerts and reports.

Advanced FeaturesComing soon

Automated Escalation

Alerts trigger if notifications miss compliance timelines.

Multi-Language Notifications

Notices are planned for 23 Indian languages.

Severity Scoring

Breaches are categorised by impact to set priorities.

Integrated Breach Dashboard

All breaches, notification statuses, and timelines appear in one view.

Evidence Repository

Supporting documents can be attached to each breach record.

Designer

The central studio where administrators create, customise and standardise data protection artefacts, including consent notices, assessments, breach notifications and request forms. Each artefact passes through a maker-checker approval before publishing.

Consent Designer

Build Templates

Create new consent template from scratch with configurable fields, texts and sections.

Clone Templates

Duplicate and modify existing templates to save time.

Multi-language Support

Build and preview consent templates in 23 supported Indian languages.

Dynamic CTAs

Customise action buttons to suit your branding (e.g. Accept, Reject or Accept All, Accept Essential, Deny All etc).

Preview Mode

View how the consent will appear to end users before sending for approval.

Approval Workflow

Maker-checker flow to ensure reviewed and approved templates only are published.

Version Control

Maintain version history to track template changes over time.

Publishing Controls

Only published templates are available for use by data collection systems.

Notices Designer

Notice Builder

Create notices that describe data collected, purposes, and links to updating consent preferences.

Attach Consents

Attach consent templates to notice templates so that collected data, purposes, and sharing details fill in automatically.

Language Options

Translate notices into 23 languages and preview them in the dashboard.

Preview Mode

View how the notices will appear to end users before sending for approval.

Approval Workflow

Maker-checker flow to ensure reviewed and approved templates only are published.

Clone Templates

Duplicate and modify existing templates to save time.

Privacy Center Portal

Add a Privacy Center link to consent notices, with optional authentication before users can access it.

Bulk Send API

Dispatch notices to multiple users through APIs or uploading via files.

Version Management

Keep history of published notice versions.

Audit Logs

Maintain a complete trail of notice creation, edits, and publication.

Privacy Assessment Designer

Template Builder

Create new assessments or clone existing ones.

Clone Templates

Duplicate and modify existing templates to save time.

Section Management

Organise assessments into multiple sections (e.g. Collection, Processing, Sharing, Qualitative and Quantitative questions).

Question Types

Add multiple-choice or free-text questions.

Scoring & Weighting

Assign risk weightages and risk scores per question and responses.

Preview & Approve

Review assessment layout before publishing.

Dynamic Scoring Engine

Auto-compute privacy scores based on answers.

Insight Generation

Generate AI powered risk visualisations and reports automatically.

Vendor Assessment Designer

Assess vendor readiness and compliance posture for third-party processors.

Template Builder

Create dedicated vendor assessment templates or clone from defaults.

Clone Templates

Duplicate and modify existing templates to save time.

Sectional Design

Build sections for Data Handling, Security Posture, Legal Compliance, etc.

Risk Weighting

Assign risk weightages and risk scores per question and responses.

Evidence Uploads

Allow vendors to attach supporting documents (e.g. ISO, SOC 2).

Approval Workflow

Maker-checker process before publishing templates.

Vendor Type Templates

Define different assessments per vendor category (e.g. Cloud, on-prem, SaaS etc).

Periodic Review Scheduling

Schedule recurring vendor assessments.

Request Form Designer

Enable administrators to create public-facing forms for data principal requests (Subject Access Requests or SAR forms).

Form Builder

Design request forms to allow Data Principals to exercise their rights (Processing, Correction, Deletion requests).

Clone Form Templates

Duplicate and modify existing templates to save time.

Custom Branding

Add logo, organisation name, and instructions.

Input Field Control

Define mandatory and optional fields.

Preview & Approve

Validate before publishing.

Embed Options

Publish via secure API or embed into websites and apps.

Authentication Integration

Verify data principal identity before submission of forms.

Breach Notification Designer

Prepare breach templates for rapid deployment during incidents.

Template Builder

Create templates for Data Principals, Management, or the Data Protection Board.

Clone Templates

Duplicate and modify existing templates to save time.

Dynamic Placeholders

Insert incident-specific fields (e.g. breach type, date, scope).

Preview & Approve

Review layout and message before publishing the templates.

Auto-fill from Breach Report

Dynamically populate template fields from registered breach reports.

Multi-channel Notifications

Enable email, SMS, or in-app notifications.

Template Library

Maintain pre-approved templates for different breach categories.

Data Mapping Designer

Mapping Interface

Match source fields to destination fields.

Preview & Validation

Review mapped results before importing.

Save Mappings

Save mappings for future use and automated file uploading.

Auto-detect Fields

Suggest mapping using field recognition.

Error Reporting

Highlight mismatched or missing fields when uploading.

Admin

Centrally manage users, roles, configurations, and system settings to support secure, efficient and compliant operations across the Atlas platform.

User Management

Add User

Create new user accounts by entering required details; credentials are emailed automatically.

Edit User

Update existing user information or change roles and permissions.

Delete User

Permanently remove inactive or obsolete user accounts.

Disable/Enable User

Temporarily suspend or reactivate access without deleting accounts.

Audit Notifications

Automated email alerts notify users whenever their account is created, modified, or deleted.

Role Management

Add Role

Create a new role with specific permissions and assign it to users.

Add Role Features

Enable or disable access to modules or sub-features (e.g Discovery, Checks, Requests).

Clone Role

Duplicate existing roles and fine-tune permissions to quickly create similar profiles.

Assign Role

Select from available roles during user creation or modification.

Delete Role

Permanently remove obsolete roles not linked to active users.

Safeguard Mechanism

Prevent deletion of roles currently assigned to users to avoid access disruptions.

Role-Based Access Control

Role Assignment

Each user is assigned a role (e.g Analyst, Administrator, Maker, Checker) at the time of account creation, determining their access level and privileges.

Custom Roles

Create tailored roles with granular permissions to match organisational hierarchy and function-specific needs.

Dynamic Privilege Updates

Modify role privileges at any time to adapt to evolving team structures and regulatory requirements.

Access Consistency

Maintain uniform access rules across all modules, reducing misconfigurations and human errors.

Key Management

Generate Keys

Create unique API keys directly from the Admin dashboard.

Assign Permissions

Restrict each key to specific scopes and privileges.

View Keys

Display active API keys and their linked integrations.

Revoke Keys

Instantly deactivate compromised or unused keys.

Audit Logs

Track creation, usage, and deletion events for every API key.

Notification Engine

Configure Notifications

Define email templates and triggers for events such as user creation, breaches, or data principal requests.

Multi-Channel Alerts

Send notifications via email, SMS, WhatsApp, or Slack.

Escalation Notification

Automatically escalate critical alerts based on time durations.

Custom RulesComing soon

Enable notifications based on custom rules.

Logs & Auditing

System Logs

Record user logins, configuration changes, API key events, and administrative actions.

Retention Policy

Configure how long audit logs are stored based on compliance requirements.

Export Logs

Download audit logs for internal or external compliance reviews.

Integrity Controls

Tamper-proof log entries with timestamps ensure audit reliability.

Advanced FeaturesComing soon

Single Sign-On (SSO)

Integrate with enterprise authentication (LDAP, OAuth, or SAML).

Two-Factor Authentication (2FA)

Enforce additional security for all administrator logins.

Session Management

View and terminate active sessions from the dashboard.

Remote Session Termination

If unauthorised activity is detected, the admin can terminate that session remotely.

System Health Dashboard

Monitor uptime, error rates, and API performance in real-time.

Automated Backups

Schedule configuration and user data backups for disaster recovery.

FAQ

Frequently asked questions

Quick answers about what Atlas Privacy Manager can do.

What is Atlas Privacy Manager?

Atlas Privacy Manager is a data privacy compliance platform built for the DPDP Act. It brings data discovery, privacy assessments, systems management, consent, cookies, processing activities, requests and grievances, breach management, a template designer and admin controls into one platform, with over 200 features.

What does Atlas data discovery scan?

Atlas connects to databases such as MySQL, MariaDB, Oracle, SQL Server and PostgreSQL, to Windows and Linux systems, and to cloud storage on AWS, Azure and Google Cloud. It scans structured and unstructured files and also images using OCR. Scans can be agentless, and you can run full, delta, metadata or random sample scans.

Can Atlas find personal data in Indian languages and ID documents?

Yes. Atlas detects personal data in local Indian languages, for example in an electricity bill written in a local language. Its machine learning models are trained on Indian ID documents to improve accuracy and reduce false positives.

How does Atlas manage consent?

Atlas shows consent notices at data collection or onboarding and captures consent through web, mobile, email or WhatsApp. Notices are available in 23 languages. Every consent is logged with an audit trail and kept for up to seven years, and users can view, update or withdraw consent from the Privacy Center.

Does Atlas handle cookie consent?

Yes. Atlas scans your domains and subdomains for cookies, classifies them as Essential, Analytics, Marketing or Others, and lets you design a multilingual banner. Visitors can accept or reject cookie categories, every choice is recorded as proof of consent, and cookies can be activated only after consent and deleted on a schedule.

How does Atlas handle data principal requests and grievances?

Atlas gives you branded request and grievance forms, registers each submission with a unique ID, and routes it to the right owner. It sends reminders to help you meet statutory timelines, escalates unresolved grievances, and keeps request records and audit logs for seven years.

How does Atlas support breach management?

You register a breach through a guided form, then notify data principals, the Data Protection Board and internal stakeholders using pre-approved templates that fill in automatically. Notices go through a maker-checker review before sending, and a regulatory report is generated for submission within 72 hours.

Does Atlas support approval workflows and access control?

Yes. Consent notices, assessments, request forms and breach notifications all pass through a maker-checker approval before publishing. Admins can create custom roles with granular permissions, manage API keys, and keep audit logs of user and system activity.

Are all features available today?

Most are. A few capabilities are marked Coming soon on this page, such as AI-based pattern detection in processing activities, bulk uploads for requests, single sign-on and two-factor authentication. Book a demo to see what is available now.

Ready to experience Atlas Privacy Manager?

Whether you are a growing startup or a global enterprise with millions of customers and thousands of systems, Atlas helps you achieve and maintain full data privacy compliance.

Book a demo

Trusted by 250+ customers worldwide