
Championing intuitive compliance
Branch offers a variety of compelling solutions to help marketers grow revenue and improve customer retention. Claudia Castro keeps compliance simple across Branch’s intricate data landscape by leaning in on automation and proactive risk mitigation, allowing Branch to embrace cutting edge tech without introducing unmitigated risk.
- 300+ systems in RoPA
- 45 AI systems safely unlocked

When Claudia first joined Branch, privacy compliance efforts were bogged down in spreadsheets and relied heavily on manual workflows. With multiple products, each with its own unique privacy needs, in addition to a variety of data subject relationships, these manual methods were holding back Branch’s tech strategy. Although Branch tried other privacy tech solutions, nothing stuck.
Claudia and her team hoped to modernize their privacy strategy and free up time to work ahead on emerging privacy challenges.
Branch needed a privacy partner that wouldn’t be slowed down by their mature tech stack. Branch selected DataGrail as the best match for their needs for three reasons:
- Integrations: Eliminate risk of manual error by cutting down on middle men.
- User experience: Compliance needs to be easy to be prioritized.
- Automation: Reduce the lift of basic tasks to focus on privacy strategy.
Branch started with DSR automation, then focused on real-time data mapping.
By making compliance simple, Claudia not only improves employee adoption of privacy risk reduction measures, but also unlocks new innovative potential for the business.
Employees feel safer exploring innovative new tech like AI when they understand the protective measures in place. The privacy team can maintain a more complete, accurate RoPA and use AI-powered risk detection to identify and oversee higher risk processing activities. By taking care to ensure risk assessment is intuitive for employees, Claudia obtains a more complete picture of privacy risk.
For DSRs, Claudia used DataGrail Automations to programmatically advance requests based on factors such as the data subject’s relationship with Branch and the products they use.Requests process faster and with no effort wasted, as they only query the systems actually relevant to the data subject.
With the time she doesn’t need to spend chasing down data subject requests, Claudia has implemented new privacy and AI training programs. Her team says that Claudia has fostered a strong culture of privacy awareness and competence