Data Subject Management¶

Manage individuals whose personal data is processed by your organization using privacy-preserving identifiers.

Overview¶

Data subjects represent individuals whose personal data is processed by your organization. The Dxtra platform tracks data subjects using privacy-preserving Decentralized Identifiers (DIDs) generated deterministically from PostgreSQL UUIDs via SHA3-256.

Core capabilities:

• Privacy-preserving identity management with DIDs
• Automated deduplication using hashed field matching
• Processing activity tracking and audit trails
• Integration with rights request workflows

Creating Data Subjects¶

Via Integrations¶

Data subjects are automatically created when you connect third-party platforms:

• Shopify -- Customer records from orders and accounts
• Stripe -- Payment customer profiles
• Mailchimp -- Email subscriber records
• Other integrations -- See Integration Guides

Via the Dashboard¶

1. Navigate to Data Processing Activity Logs in the dashboard
2. Data subjects appear as records are created through integrations or API calls

Via API¶

Create data subjects programmatically using the createDataSubject GraphQL mutation. See the API Reference for details.

Privacy-Preserving Identification¶

Data subjects are identified through privacy-preserving links rather than storing raw personal data.

How It Works¶

1. When a data subject is created, field values (email, phone, etc.) are hashed
2. These hashes are stored as privacy-preserving links
3. Future records with matching hashes link to the same data subject
4. Original values are not stored in the data subject record

Benefits¶

• Deduplication -- Same individual across platforms links to one record
• Privacy -- No raw PII stored in the data subject table
• Compliance -- Supports data minimization principles
• Cross-platform -- Works across all connected integrations

DID (Decentralized Identifier)¶

Each data subject receives a unique DID that serves as their privacy-compliant identifier:

• Format: did:dep:<unique-hash>
• Generated automatically when a data subject is created
• Used for audit trail tracking
• Enables cross-platform data subject recognition

Processing Activities¶

All data processing operations are tracked for each data subject. Activities are automatically recorded when:

• Integration webhooks receive customer events
• Rights requests are processed
• Consent preferences are updated
• Data exports or deletions occur

Rights Requests¶

Data subjects can exercise their privacy rights through your Transparency Center or via API:

See Rights Requests for details.

Dashboard Access¶

View and manage data subjects in the Dxtra Dashboard:

1. Navigate to Data Processing Activity Logs
2. Use global search to find by DID
3. Click a data subject to view their profile

The profile includes:

• Basic information and creation date
• Processing activity timeline
• Rights request history
• Consent preferences
• Connected platform records

Best Practices¶

Data Minimization¶

1. Hasura Event: data_subjects_insert → Conduit /hasura/events/data-subjects/insert
2. Conduit Handler: Publishes message to RabbitMQ audit_register_exchange
3. dx-agent Consumer: Receives registration job from queue
4. DID Generation: Agent generates DID deterministically from UUID via SHA3-256
5. Callback: Agent publishes result to audit_register_results exchange
6. DID Update: Conduit updates data_subjects.did column

Deduplication¶

• Provide consistent field values (normalize email case, trim whitespace)
• Use external IDs from integrations when available
• Review duplicate records periodically

Troubleshooting¶

Duplicate Data Subjects¶

If the same individual appears as multiple records:

• Check for whitespace differences in field values
• Verify email addresses use consistent casing
• Review if external IDs changed between submissions

Missing DIDs¶

If a data subject lacks a DID:

1. Verify the parent data controller has a DID
2. Use the generateDataSubjectDID mutation to trigger generation
3. DID generation typically completes within seconds

Related Documentation¶

• Rights Requests -- Submit and process data subject privacy rights
• Processing Activities -- Track data processing for compliance
• API Reference -- GraphQL schema documentation

For questions, contact support@dxtra.ai.