Skip to content

Subject access requests

Vellum

Beta

Subject Access Request management and redaction.

A case manager for subject access requests under the Data Protection Act 2018 and UK GDPR. Vellum records the request and computes the statutory deadline, takes in material in mixed formats, proposes redactions with the evidence behind each one, and holds the release until a named officer has decided every proposal. The produced bundle is then searched by independent paths, and those paths are first shown to fail on deliberately dirty controls.

Who it is for. Data protection officers and disclosure teams answering subject access requests under a statutory clock, in local authorities, health bodies and other regulated organisations.

Status
Beta
Tags
Subject access requestsUK GDPRDPA 2018RedactionDisclosureAudit trail

What it does

  • Statutory clock

    The deadline is computed from the date identity was confirmed, and the calculation is shown alongside it.

  • Party register

    Every individual in the case is named once with their role and their capacity, and that decision is then applied across the whole pack.

  • Concealed content discovery

    Text hidden by colour, size, position, tracked changes, document properties or a hidden worksheet is found at ingest and queued for a reviewer, with the mechanism named.

  • Detection with stated evidence

    Every candidate carries the detector that fired, its version and the rule or checksum behind it, so a reviewer can weigh the proposal.

  • Release is blocked while anything is undecided

    A proposed redaction that no officer has adjudicated stops the bundle from being produced.

  • Verified after production

    The finished bundle is searched through independent text, structure and pixel paths, each proven able to report a planted term before its silence is read as absence.

Documentation and access details are on the product site, vellum.rodmena.co.uk. For a pilot, an integration or procurement questions, contact us.