Data Schemas¶

Reference documentation for Dxtra's GraphQL API types.

API Overview¶

Dxtra provides a GraphQL API for accessing privacy compliance data. All data operations go through this API with role-based access control.

graph LR
    subgraph "Your Application"
        Client[Your App]
    end

    subgraph "Dxtra API"
        GraphQL[GraphQL API<br/>api.dxtra.ai]
        Auth[Authentication]
    end

    Client -->|Query/Mutation| GraphQL
    Client -->|JWT| Auth

Core Data Types¶

Data Controllers¶

Organizations using the Dxtra platform.

Relationships: - users - Team members - dataSubjects - Customer privacy profiles - purposes - Processing purposes - privacyNotices - Privacy policy documents

Data Subjects¶

Customer privacy profiles managed by data controllers.

Relationships: - dataController - Parent organization - dataProcessingActivities - Processing event log - rightsRequests - GDPR/CCPA requests - consentFormValues - Consent preferences

Data Processing Activities¶

Audit log of data processing events for compliance reporting.

Rights Requests¶

GDPR/CCPA data subject rights requests.

Consent Form Values¶

Recorded consent preferences per data subject.

GraphQL Examples¶

Query Data Subject¶

query GetDataSubject($id: uuid!) {
  dataSubject(id: $id) {
    id
    did
    doNotTrack
    globalPrivacyControl
    createdAt
    dataProcessingActivities {
      id
      triggeredAt
      fields
      source {
        name
      }
      type {
        name
      }
    }
    rightsRequests {
      id
      type
      status
      createdAt
    }
  }
}

Insert Rights Request¶

mutation InsertRightsRequest($input: dataSubjectRightsRequests_insert_input!) {
  insertDataSubjectRightsRequest(object: $input) {
    id
    type
    status
    createdAt
  }
}

Query Processing Activities¶

query GetActivities($dataSubjectId: uuid!) {
  dataProcessingActivities(
    where: { dataSubjectId: { _eq: $dataSubjectId } }
    order_by: { triggeredAt: desc }
    limit: 50
  ) {
    id
    triggeredAt
    fields
    source {
      name
    }
  }
}

API Access Roles¶

Specify the role using the X-Hasura-Role header in API requests.

Schema Relationships¶

erDiagram
    DataController ||--o{ DataSubject : "has many"
    DataController ||--o{ Purpose : "has many"
    DataController ||--o{ PrivacyNotice : "has many"

    DataSubject ||--o{ ProcessingActivity : "has many"
    DataSubject ||--o{ RightsRequest : "has many"
    DataSubject ||--o{ ConsentFormValue : "has many"

    DataController {
        uuid id
        string title
        string did
    }

    DataSubject {
        uuid id
        string did
        boolean doNotTrack
    }

    ProcessingActivity {
        uuid id
        datetime triggeredAt
    }

    RightsRequest {
        uuid id
        enum type
        string status
    }

Related Documentation¶

• Platform Overview - Architecture overview
• GraphQL API - API documentation
• Authentication - API access setup