December was a big month for risk intelligence, consent compliance, and automation across your privacy stack. We shipped several powerful upgrades that help teams prioritize real risk, stay ahead of new regulations, and reduce manual work, without adding complexity.

Here’s what’s new.

Expanded Metadata for 5,400+ Third-Party Systems

We’ve expanded the DataGrail Intelligence Library to include deeper metadata for even more third-party systems.

We now support 5,451 systems with automated metadata that includes: 

• What the system does (in plain-English)
• If it uses AI or generative AI and how
• Sensitive data collection and processing
• Use of foundational AI models
• Additional privacy risk details

This powers deeper privacy insights across the DataGrail platform, including smarter risk scoring, broader shadow AI detection, and faster data mapping and RoPA automation.

AI-Detected System Risks in Risk Register

Now you can find AI-detected system privacy risks in both the system profile and Risk Register. Use the risk score and detailed information to quickly review and assign next steps.

Detected risk types include:

• Sensitive personal data (including medical data)
• AI and automated decision-making
• AI subprocessors
• Children’s and vulnerable people’s data 

Privacy teams are flooded with new apps and AI tools. Only DataGrail uses AI to help you prioritize what actually matters, fast.

New State-Specific Privacy Policies: RI, KY, IN

New policies for Rhode Island, Kentucky, and Indiana are now available in the Privacy Policy Library.

New policies will be either automatically activated or added as inactive, depending on your DataGrail settings (learn how to check)

Bonus: new smart logic now also detects conflicting policy rules in overlapping locations and resolves them automatically.

Add Tracking Details to the Consent Banner

You now have the option to add live tracking details to your banner.

• Let customers review the cookies and services running on your site
• Automatically populated for most rules using DataGrail models
• Edit and customize with no-code, drag and drop tools

Deliver the transparency customers and regulators expect, without the overhead or complexity.

New Discovered Integrations Tab

A new tab surfaces integrations detected by Live Data Map that can be connected for DSR management.

Plus enhancements to:

• Filter integrations by capability and configuration type
• Quickly find the right integration during setup

A faster path to fully automated DSR fulfillment, powered by our patented system detection.

GPC / DNT Notice & Layout Enhancements

To support new CPRA requirements, DataGrail Consent now includes:

• Browser Signal Notice asset that displays when GPC/DNT is honored
• New layout behavior to show a dedicated notice layer when a signal is detected

This ensures compliance with future disclosure requirements and introduces a more flexible, user-friendly experience for non-technical teams.

New & Updated Integrations

New

• Mixpanel (added support for Responsible Data Discovery)

Updated

• Azure Blob Storage (migrated to the new client library)

December’s release sharpens risk prioritization, strengthens consent compliance, and reduces operational friction, setting teams up to start the new year with more clarity and control.

We ship new features and updates weekly. For more details, visit the changelog.

The DataGrail Product Team