Skip to content

Subject access requests

Vellum

Available

Subject Access Request management and redaction.

A case manager for subject access requests under the Data Protection Act 2018 and UK GDPR. Vellum records the request, computes the statutory deadline and takes in material in mixed formats. It proposes redactions with the evidence behind them and holds the release until a named officer has decided all proposals. The produced bundle is then searched by independent paths that have first been shown to fail on deliberately dirty controls.

Who it is for. Data protection officers and disclosure teams answering subject access requests under a statutory clock, in local authorities, health bodies and other regulated organisations.

Status
Available
Part of
Offerings
Tags
Subject access requestsUK GDPRDPA 2018RedactionDisclosureAudit trail

What it does

  • Statutory clock

    The deadline is computed from the date identity was confirmed and shown with its calculation.

  • Party register

    The people in a case are named once, with their role and capacity, and that decision is applied across the whole pack.

  • Concealed content discovery

    Text hidden by colour, size, position, tracked changes, document properties or a hidden worksheet is found at ingest, labelled with the mechanism that hid it, and queued for a reviewer.

  • Detection with stated evidence

    A reviewer weighing a candidate can see the detector that fired, its version and the rule or checksum behind it.

  • Release is blocked while anything is undecided

    A proposed redaction that no officer has adjudicated stops the bundle from being produced.

  • Verified after production

    The finished bundle is searched through independent text, structure and pixel paths. A path has to report a planted term before its silence counts as absence.

Documentation and access details are on the product site, vellum.rodmena.co.uk. For a pilot, an integration or procurement questions, contact us.