Privacy Records and Assessments Without the Spreadsheets
Keep your records of processing current, answer data subject requests on time, and run DPIAs, consent and breach handling against UAE PDPL, ISO 27701 and GDPR.
DSR-118Access request, day 6 of 30On trackDSR-114Erasure request, day 21 of 3010 days leftDSR-109Correction requestClosedEverything Privacy Needs, on One Core
Records of Processing
Record what personal data you hold, why, where it goes and who is responsible for it.
Data Subject Requests
Log a request and a 30-day clock starts, with reminders and escalation before the deadline.
DPIA
Assess high-risk processing before it starts, with the outcome and actions on record.
Consent
Keep a record of what people agreed to and when.
Breach Handling
Log personal data breaches, assess them and track every notification step.
ISO 27701 Assessment
Run a gap assessment with the same scoring and corrective actions as your other frameworks.
From Set-Up to Proof in Four Steps
Map Your Data
Record processing activities, purposes, transfers and owners.
Assess
Run DPIAs on high-risk processing and an ISO 27701 gap assessment.
Respond
Handle data subject requests and breaches against their deadlines.
Report
Show your privacy posture to management and regulators.
Privacy as Your Team Sees It
Every screen is role-based. Focal points see their tasks, managers see the whole picture.
| Ref | Item | Owner | Status |
|---|---|---|---|
DSR-118 | Access request, day 6 of 30 | Owner 1 | On track |
DSR-114 | Erasure request, day 21 of 30 | Owner 2 | 10 days left |
DSR-109 | Correction request | Owner 3 | Closed |
One Piece of Work, Credited Everywhere
Privacy runs on the frameworks marked Included. Its records are also mapped to the related standards marked Mapped, so one piece of work counts toward your integrated management system.
Describe It Once. Arbor AI Fills in the Rest.
Arbor AI drafts records, suggests controls and evidence, and maps them to your frameworks. You review and approve every suggestion.
Try Arbor AI for PrivacyShaped Around How You Work
Your fields, your workflows, your risk matrix and your organisation structure.
Frequently Asked Questions
Does Arbor Cover UAE PDPL?
Yes. Records of processing, data subject requests, DPIA, consent and breach handling support your PDPL duties.
How Are Request Deadlines Tracked?
Every request starts a 30-day clock with reminders and escalation before it expires.
Can Privacy Controls Map to ISO 27001?
Yes. Overlapping controls are mapped, so shared evidence counts for both.
Works Even Better Together
ISMSInformation Security
Run ISO 27001, ISO 27017 and UAE IA from one set of controls.
ERMEnterprise Risk
One register for your strategic, operational, financial, reputational, legal and environmental risks, with third-party risk management built in.
AIMSAI Management
Regulators and customers want to see AI governed.
See Arbor GRC with Your Own Frameworks
Bring your current risk register. We can import it from Excel during the demo, so you see your own risks in Arbor, not ours.