Six pillars, twenty-seven modules, one platform. Everything is included — nothing to assemble.
Pillars
Find where personal data actually lives, label it, and keep the map current by re-scanning rather than by memory.
Data discover overview
Data classification
Consent Overview
Notice, consent and withdrawal handled as artefacts — versioned, receipted, and interoperable with a Board-registered Consent Manager.
Intake, identity verification and fulfilment of a data principal's request, against the statutory clock and across every connected system.
Rights request
Governance overview
Assessment, impact analysis, processor risk, transfer governance and retention — the obligations that are met by decision rather than by scan.
Know the instant a file, permission or database structure changes, and turn security signals into a breach case with a derived affected set.
Rights request
Governance overview
The record that makes the rest defensible: an append-only hash-chained ledger, a vault, and electronic records issued with a certificate.
Encryption & keys
The six pillars run on one protection layer: data sealed under keys you control, and every key action kept as evidence.
Vaultdef's key manager, your own hardware security module, or your cloud key service — or bring your own key material.
Each organisation's records are wrapped under a key only it controls, so one tenant's keys never open another's data.
Creation, rotation and use land in the same hash-chained ledger as your consent receipts and audit records.
Personal data has a long shelf life, so Vaultdef runs the post-quantum algorithms NIST standardised in 2024 alongside today's proven ones — protection that holds as quantum computing matures.