Osano Features

Good data governance requires actively managing data privacy, which means you must comply with laws and actively monitor your vendors to ensure they remain compliant.

Management

Data Subject Rights Management

Easily manage 1 or 1,000,000 data subject requests. Osano makes it easy to verify a data subject's identity, assign inbound requests to the appropriate owner, delegate data source retrieval, and deliver the results to the data subjects in the time as required by law.

Learn About DSAR/SRR

Monitoring

Vendor Risk Monitoring

Osano's team of CIPPs and attorneys reviews and objectively grades the privacy practices of more than 11,000 vendors. We use a proprietary 163 item ontology that maps closely to NIST and ISO privacy standards.

Plus, when vendors adjust their practices, Osano's attorneys re-review them. What you get is an easy to understand breakdown of where each vendor is doing well, where they are doing poorly, and with whom they share data.

Learn About Vendor Risk Monitoring

Monitoring

Policy Change Detection

When a vendor changes their policies such as GDPR, Privacy, Terms and more, they may or may not tell you. If they do notify you, they may or may not explain what changed.

Osano keeps a watchful eye on your vendors’ published compliance documents, crawling and comparing nightly. We maintain copies of historical versions, alert you when changes occur, and make it easy to see what has changed between two documents by using red and green highlights.

Learn About Policy Change Detection

Monitoring

Vendor Lawsuit Alerts

Your vendors may state they are following certain protocols, but do they do as they say? The first place that you'll find evidence of failure to comply is in the summary of a lawsuit filed against a vendor. Osano monitors more than 220,000 lawsuits in federal, state, and district courts on your behalf for suits against your vendors. We provide timely updates to help you understand whether vendors are honoring their agreements.

Although large companies likely can withstand expensive litigation, the same isn’t always true for smaller companies. If you're relying on a smaller vendor that gets bogged down in litigation, you usually won't find out until it's too late.

Learn About Vendor Lawsuit Alerts

Monitoring

Privacy Law Alerts

Regulatory compliance requirements are complex and ever-changing. Between GDPR, the California Data Privacy Law, and countless other privacy and compliance laws under consideration, it’s impossible to keep up.

Osano does it for you! We monitor international, federal, and state legislatures for new laws. Then we alert you of upcoming changes and requirements that may impact your business.

Learn About Privacy Law Alerts

Advisory

Ask the Privacy Experts

We get it. Sometimes you want to talk to a real, live person. Osano's team of privacy experts are available in the application to answer your questions and provide general guidance around best practices and laws.

Ask questions about best practices, how to handle PII, what qualifies as PII, advice on responding to data subjects, or even just get an opinion about your own privacy policy.

Learn About Privacy Experts

Developer API

PII Tracking API

Build privacy into your applications and workflows. One call to the Osano API from within your application automatically records which fields are being stored and which vendor they have been shared with.

All PII is encrypted using a one way SHA-512 hashing algorithm with a salt that is unique to each Osano customer. This means that should you choose to optionally send any PII into the Osano API, it is not reversible.

The PII Tracking API is highly scalable and can handle recording of more than one billion records per day.

Learn About PII Tracking API