One place for every right
Customers can change or withdraw consent, ask for corrections or erasure, find out how their data has been processed and shared, raise a grievance and download proof of what they agreed to.
Every right. Every channel. One Privacy Center.
Give customers one trusted place to manage their data, and give your team one place to handle what they ask for.
Wherever your customers already are
Inside your website and app, or one tap away from a QR code, SMS, WhatsApp message or email.
Verified first
Identity is checked before anyone sees or changes their data.
23 languages
All 22 Eighth Schedule languages, plus English.
Every request, on the clock
Each request gets a unique ID, goes to the right owner automatically and is tracked against internal and statutory timelines, with reminders before anything slips.
Looks like you
Your logo, colours and forms, built in the Request Form Designer.
7 yrs
Evidence kept
Every action logged, with request records kept for seven years.
01ACCESS
Meet customers where they already are
Embedded in your apps, or one link away from any message.
Add the Privacy Center to your website and mobile app, or share it as a standalone link. Put it on a QR code at your branch, store or counter, or send it by SMS, WhatsApp or email. Every consent notice can carry a Privacy Center link too, so customers can come back and change their mind whenever they want.
02VERIFY
The right person, every time
Identity verified before anyone sees or changes their data.
A Privacy Center is only as safe as its front door. Atlas puts an authentication gateway in front of the portal, or uses your own login when it sits inside your app, so customers prove who they are before they view consent records or submit a request. Request forms verify the Data Principal's identity before they can be sent.
03CONSENT
Change consent in seconds, purpose by purpose
Review, update, reaffirm or withdraw, at any time.
Customers see every consent they have given, what data it covers and when they gave it. They can turn individual purposes off, reaffirm consent after a notice changes or withdraw altogether. Withdrawing is as easy as agreeing, and each change is pushed to your connected systems so processing stops where it should.
04REQUEST
Requests made simple, for both sides
Correction, erasure, withdrawal and processing activity requests.
Customers pick what they need from a short, clear form: correct their data, erase it, withdraw consent or find out how their data has been processed and who it has been shared with. Every request is registered with a unique ID, the customer gets an acknowledgement straight away, and they can follow its status from pending to in progress to resolved.
05ROUTE
Each request lands with the right owner
Automated routing, notifications and reminders for your team.
Rules send each request to the right system owner or department based on its type. Owners are notified by email when a request is created, assigned or updated, can add notes as they work, and get reminders before statutory timelines run out. Processing activity requests can be answered automatically from your records of processing, and erasure is passed to your systems to carry out, subject to legal retention periods.
06GRIEVANCE
Grievances handled, not lost in an inbox
A grievance officer workflow with automatic escalation.
Customers raise a grievance through the same Privacy Center. It goes straight to your grievance officer, appears on a central dashboard with filters and search, and escalates automatically if it is not resolved in time. Set resolution timelines to your internal or regulatory standards, monitor them, and record and share the outcome with the customer when it closes.
07DOWNLOAD
Proof in the customer's hands too
Downloadable consent artefacts and a full consent history.
Customers can download the notices they agreed to and their consent artefacts, and see a dated history of every consent they have given, changed or withdrawn. It builds trust, cuts down on "what did I agree to?" questions for your support team, and shows that you have nothing to hide.
08DESIGN
Your Privacy Center, in your brand and languages
Build request and grievance forms with the Request Form Designer.
Design request and grievance forms with your own fields, logo and colours, preview them and publish when ready. Publish through a secure API or embed them in your website and apps, so the Privacy Center feels like part of your own experience. Customers can use it in English or any of the 22 Eighth Schedule languages.
09EVIDENCE
Every action on record
Audit logs, evidence reports and role-based access.
Every action on a request or grievance is logged with a timestamp and the person who took it. Evidence reports show the full lifecycle of each request, from submission to resolution, ready for an audit, your Board or a regulator. Request data and correspondence are kept for seven years, and role-based permissions control who can view or edit them.
From a customer's tap to a closed, recorded request.
-
01
Reach
The customer opens the Privacy Center from your website, app, a QR code, SMS, WhatsApp or email.
-
02
Verify
Their identity is confirmed before they can view records or submit anything.
-
03
Act
They change consent, make a request, raise a grievance or download their records.
-
04
Resolve and record
Your team gets it routed and on the clock, and every step is logged as evidence.
Make rights easy to use, and easy to prove.
See a Privacy Center set up with your brand, your channels and your request types in a 30 minute demo.
The free gap assessment covers a single department or division.
Frequently Asked Questions
Everything you need to know about the Atlas Privacy Center.
Ask us anythingFOR YOUR CUSTOMERS
What can customers do in the Privacy Center?
Review, change, reaffirm or withdraw consent purpose by purpose, request correction or erasure of their data, ask how their data has been processed and shared, raise a grievance, download their consent artefacts and notices, and see their full consent history.
How do customers reach it?
Through your website or mobile app, a standalone link, a QR code, or a link sent by SMS, WhatsApp or email. Consent notices can include a Privacy Center link as well.
How do you make sure it is really the customer?
An authentication gateway verifies the customer before they can access the Privacy Center, or it uses your own login when embedded in your app. Request forms verify identity before submission.
Which languages are supported?
English and all 22 languages in the Eighth Schedule of the Constitution.
FOR YOUR TEAM
Which request types are covered?
Consent preferences, correction, erasure, consent withdrawal and processing activity requests, where a customer asks how their data has been processed and who it has been shared with.
How are requests assigned?
Rules route each request to the right system owner or department by type. Owners are notified by email when a request is created, assigned or updated, and can add notes as they work.
How do we keep to statutory timelines?
Every request gets a unique ID and is tracked against the timelines you set, with automated reminders before they run out. Grievances escalate automatically if they are not resolved in time.
Can processing activity requests be answered automatically?
Yes. Processing activity requests can be fully automated from your records of processing, so customers get a summary of how their data is used without manual work.
Does Atlas delete the data when an erasure request is approved?
Atlas passes the erasure request to your systems through API or webhook integration, and your systems carry out the deletion, subject to any legal retention periods.
SET-UP AND EVIDENCE
Can the Privacy Center match our brand?
Yes. Build request and grievance forms in the Request Form Designer with your own fields, logo and colours, then publish them through a secure API or embed them in your website and apps.
What evidence do we get?
Every action is logged with timestamps and user activity. Evidence reports show the full lifecycle of each request, and request data and correspondence are kept for seven years.
Who in our team can see requests?
Role-based permissions control who can view or edit requests and grievances.
Trusted by 250+ customers worldwide
