Privara — Self-Hosted GDPR DSAR Management Portal
Self-hosted GDPR DSAR portal that tracks every request against its statutory deadline.
The problem it solves
DSARs arrive by email and the clock starts immediately, but most organisations have nothing tracking them — no deadline dashboard, no audit trail, just a shared inbox. Enterprise GRC software is overkill and expensive for a team that just needs to log requests, verify identity, and respond inside the 30-day GDPR window without missing it.
- Requests tracked in an inbox with no deadline visibility
- No audit trail of who did what and when
- Enterprise GRC suites priced and scoped for far more than DSAR tracking
What you get
Statutory deadline tracking
The dashboard flags overdue and due-soon requests, with deadline math following GDPR Art 12(3) exactly, including month-end clamping.
Public submission form
A public-facing form with email-based identity verification for intake.
Append-only audit log
Every status change, internal note, and extension grant is timestamped and permanent.
All five GDPR rights
Captures Access, Deletion, Rectification, Portability, and Objection requests, shown throughout the admin interface.
Reusable response templates
Save canned acknowledgement, completion, and refusal text for reuse across requests.
CSV/JSON export
Export request data for reporting or record-keeping.
Pricing — one-time, yours forever
Available soon — get notified
Checkout isn't open yet. Leave your email and we'll send one note the moment Privara — Self-Hosted GDPR DSAR Management Portal can be purchased — nothing else.
Screenshots
Honest limitations
- No automated data-discovery across systems — it tracks requests, it does not scan your databases for personal data
- Not a full GRC suite: no policies, DPIAs, breach management, or staff training records
- Not built for multi-tenant SaaS platforms needing isolated per-customer workspaces
- Using Privara doesn't itself make you GDPR-compliant — legal sufficiency of your responses is your responsibility
2-minute web installer, plain PHP 8.1+ with MySQL or SQLite (WAL mode), no Composer or build step — Dockerfile included.
Frequently asked questions
Does this make me GDPR-compliant?
No — it helps you meet the deadline and maintain an auditable record of every request; whether your responses are legally sufficient is your responsibility and depends on your jurisdiction and the specifics of each request.
Does it actually send emails?
Yes, via PHP's mail() by default, with SMTP host, port, username, and password configurable in the admin settings panel for reliable delivery via services like SendGrid or Postmark.
What request types are supported?
All five GDPR rights — Access, Deletion, Rectification, Portability, and Objection.
What if the developer disappears?
It's a self-contained PHP script you own and run — no SaaS dependency, no licence server, no phoning home.
Will it run on my shared host?
Yes — plain PHP 8 + MySQL; no Composer, no Node, no cron jobs required; if your host runs WordPress it will run Privara.
See it running before you buy
The live demo is being prepared — check back shortly.
Demo — coming soon