Dastra

Dastra is a French software company that provides a privacy and data protection compliance platform, primarily designed to help organizations meet the requirements of GDPR (RGPD), the EU AI Act, e-Privacy, UK GDPR, NIS2, and DORA regulations. The platform offers a broad set of modules covering the full lifecycle of data privacy management: - Records of processing activities (Registre des traitements): collaborative creation and management of data processing records - Data subject rights management: collecting and handling requests (access, erasure, etc.) across web channels - Cookie consent management platform (CMP): collecting and managing user cookie consents - Data breach incident reporting: storing and managing a register of data violations - Privacy Impact Assessments (PIA / DPIA): structured impact analysis workflows - Compliance management: tracking and managing regulatory compliance posture - Risk management: identifying and assessing privacy-related risks - Contract management: managing data processing agreements and vendor contracts - Data mapping: visualizing and documenting data flows and assets - Audit questionnaires: creating and scheduling compliance, third-party, and security audits - AI governance: a registry for AI systems to support AI Act compliance - Project and task management: tools to coordinate compliance workflows The platform targets Data Protection Officers (DPOs), CISOs, risk managers, Chief Data Officers, external DPOs, and executive management. It serves a wide range of industries, with clients including SNCF, Volkswagen Bank, Intersport, Pearson, France TV, MAIF, Radisson Hotel Group, and public sector entities such as the Government of French Polynesia and AP-HP. Dastra is a SaaS product with integration capabilities and migration support from other tools.