Assurance¶

The Assurance page provides a compliance health overview for your organization. It displays 12 scoring cards, each representing a key area of privacy compliance. Use this dashboard to identify strengths and gaps in your privacy program at a glance.

URL path: /data-controllers/{id}/dashboard/assurance

Access: Select Assurance in the left sidebar.

Assurance cards¶

The Assurance dashboard displays the following 12 compliance areas:

1. Data Governance — Organizational policies, leadership, and governance framework supporting data protection.
2. Lawful Basis & Purpose — How your organization establishes and documents the legal basis for each processing activity.
3. Rights Management — Your readiness to handle data subject rights requests across all applicable rights.
4. Consent Management — Configuration and tracking of consent categories, collection, and withdrawal.
5. Data Protection — Technical and organizational measures protecting personal data (encryption, access controls, etc.).
6. Breach Management — Preparedness for detecting, reporting, and responding to data breaches.
7. International Transfers — Safeguards for transferring personal data across borders.
8. Accountability — Evidence of compliance activities, documentation, and audit readiness.
9. Transparency — How effectively your organization communicates data practices to data subjects.
10. Data Minimization & Retention — Controls ensuring you collect only necessary data and retain it only as long as required.
11. Third Party Management — Oversight of data processors, sub-processors, and third-party relationships.
12. Employee Training & Awareness — Staff training programs and awareness initiatives for privacy compliance.

Each card shows a compliance score for its area. The score reflects how fully you have configured and maintained that area of your privacy program — for example, whether you have documented processing purposes, configured consent categories, enabled rights management services, or completed required assessments.

How scoring works¶

Assurance scores are calculated based on the completeness and currency of your privacy program configuration within each area. Factors that contribute to a score include:

• Whether required settings are configured (e.g. active consent categories, enabled rights services, documented processing purposes)
• Whether documents have been generated, reviewed, and approved (e.g. privacy notices, DPIAs, processor agreements)
• Whether ongoing obligations are being met (e.g. rights requests responded to within deadlines, breach reports filed on time)
• Whether supporting infrastructure is in place (e.g. Tag Manager deployed, Transparency Center published, team roles assigned)

Scores update automatically as you make changes in Dxtra. A low score in an area indicates configuration gaps or overdue actions — select the card to see what specific items need attention.

Related¶

• Assessments — Run DPIAs, transfer impact assessments, and vendor risk assessments
• Compliance Issues — Track and resolve compliance issues
• Processor management — Manage third-party data processors