In April, we raised the bar on agentic privacy again with Vera chart visualizations and powerful new MCP write actions. We also shipped a ton of top-requested product enhancements and improvements across every corner of the platform.
Here’s what’s new.
Vera Inline chart visualizations
Now Vera will show you the data, instead of just talking about it.
When you ask questions that would be better understood visually—for example, “show me request volume over the past 6 months” or “break down DSRs by type”—Vera now automatically generates an interactive chart alongside the full narrative response.
DataGrail MCP Server Write Actions
The DataGrail MCP server now includes the option to kick off Vera write actions directly from Cursor, Claude Desktop, or your AI tool of choice. Access the full power of DataGrail to add a new system or kick off a DPIA — without ever leaving your AI client.
Five write actions are available now, with more on the way.
- Add System: Add a new system to the inventory
- Create Assessment: Spin up a new assessment
- Answer Assessment Question: Programmatically answer questions within an assessment
- Update Assessment: Modify assessment fields
- Associate Processing Activity: Link a processing activity to a system
Write tools are available to all DataGrail MCP Server users and must be enabled by your admin. To get access to the DataGrail MCP Server, contact your DataGrail representative.
Request Manager Email Template Update
We’ve completely overhauled Request Manager email templates to streamline how you create, manage, and send DSR emails.
Highlights:
- Easier editing: Update template names, descriptions, subject lines, and message bodies all in one place
- Duplicate templates: Create variations of any template for the same reason, so teams can tailor messaging without overwriting their default
- AI-language support: Generate translations with a single click; manage all supported translations from one place.
- Streamlined reviews: Preview all pending changes before they go live and send preview emails to confirm everything looks right
New Privacy Policies Available in Policy Library
More active privacy policies are now available in the Policy Library, no manual setup required. DataGrail Policies in the library are updated to the latest compliance requirements automatically.
Added US State Laws:
- Texas Data Privacy and Security Act (TDPSA)
- Florida Digital Bill of Rights (FDBR)
- Virginia Consumer Data Protection Act (VCDPA)
- Connecticut Data Privacy Act (CTDPA)
- Colorado Privacy Act (CPA)
- Utah Consumer Privacy Act (UCPA)
- Oregon Consumer Privacy Act (OCPA)
- Montana Consumer Data Protection Act (MTCDPA)
Added Global Regulations:
- Personal Information Protection Law (PIPL – China)
- Personal Information Protection and Electronic Documents Act (PIPEDA – Canada)
- Quebec Law 64
- General Data Protection Law (LGPD – Brazil)
- Act on the Protection of Personal Information (APPI – Japan)
DataGrail Consent Local + Session Storage Scanning
DataGrail Consent now covers localStorage and sessionStorage out of the box, giving you full visibility and control over browser-based tracking in one place.
Highlights:
- Detect local and session storage items alongside cookies in the scanner
- Review and classify storage items in the Consent dashboard
- Block reads and writes based on the visitor’s consent state
- Vera-suggested rules for local/session storage, just like cookies
Automated Google Consent Mode Compliance Verification (BETA)
Google requires Consent Mode v2 for any advertiser running campaigns in the EEA. Proving compliance to Google and their ad partners is now faster and easier with Consent Scanner.
With a single click, Consent Scanner will verify your Google Consent Mode implementation is correct, flag any issues and recommend fixes, and produce an audit ready report.
Other Noteworthy Product Updates
Assessments
- New “date approved” column: See exactly when each assessment was approved and filter by approval date, right from the Assessments list.
Request Manager
- Readiness Check for Direct Contact Integrations: Automatically reach out to internal teams and use their response to determine how a request should proceed
- Remove the “additional comments” field on intake forms
Multibrand Groups:
- Full processing activities support
- Ability to add a user to multiple groups.
Platform and Admin Tools
- Self-Service SSO Configuration: Allows new customers to complete SSO configuration in minutes without DataGrail support intervention.
New & Updated Integrations
New
- Rokt: Access and deletion support added. API Docs
- Ringside CRM: Access and deletion support added. API Docs
And that’s just the highlights! For full details, including additional improvements and updates, see the change log.
Until next time. 👋
The DataGrail team
