Skip to content
  • Google CMP Gold
  • 4.6/5 G2
  • 4.5/5 SHOPIFY
DSAR software

DSAR Software for Data Subject Access Requests

Enzuzo collects data subject access requests through one form on the website or in the privacy policy, keeps every request in one dashboard, and shows how many days are left to answer each one.

Free forever plan available. No credit card required.
dsar-requests-hero
30,000+ Businesses worldwide Trust Enzuzo
logo_Constellation1_Light
logo_Mate_Light
logo_PCC_Light
logo_Aspen_Light
logo_Yale_Light
logo_BrightStar_Light
30,000+ Businesses worldwide Trust Enzuzo

Real Teams, Surreal Results

  • 4.6

    /5
    Rated on G2
  • Gold

    Google_CMP
    Google CMP Partner
  • SOC II

    SOC_II_xs
    Security Certified
  • “My entire experience with Enzuzo has been very positive. From the initial trial all the way through the purchase process. Everything has been great. 10 out of 10.”
  • “Enzuzo is completely self-serve and easy to use, and very attractively priced relative to competitors.”
Collect requests

Collect data subject access requests with one form

Visitors pick a request type, fill in their details and review the request before they submit it. Every request lands in the Enzuzo dashboard.

  • Where it lives: inside the Enzuzo privacy policy, on a standalone page, or linked from the site footer.

  • Four request types: get a copy of personal data, delete personal data, do not sell or share, and unsubscribe from marketing.

  • Custom design: on Growth, Pro and Enterprise plans, edit the form's title, text and button colors, or add custom CSS.

dsar-form-blue
Log every request

Keep every DSAR in one dashboard

Not every request comes through the form. Requests that arrive by email, phone, support chat or mail can be added to the dashboard by hand, so each one is tracked the same way.

  • Any channel: add requests that came in by email, phone, support chat, mail or social media.

  • Accept or reject: review each request and accept or reject it from the dashboard.

  • One place: every request, from the form or added by hand, sits in the Active Requests tab until it's completed.

dsar-process-blue
Track deadlines

Track the deadline on every DSAR

Enzuzo works out which privacy law applies to a request and how much time is left to complete it, then sends reminders as the due date gets close.

  • Days left: the dashboard shows how many days are left on each request.

  • Reminders: automated due-date reminders.

  • Reports: on Growth, Pro and Enterprise plans, DSAR reports, an audit trail and a compliance report.

dsar-track-mock
Response deadlines

How long a business has to answer a DSAR

Each privacy law sets its own clock for access requests. These are the deadlines and extensions in each law's own text, as of November 2026.

DSAR response deadlines under six privacy laws

Law Deadline Extension
GDPR (EU)
One month from receipt of the request
Up to two more months for complex or numerous requests. The person must be told within the first month, with reasons.
UK GDPR
One month from receipt, or from when requested ID details or a fee arrive, if later
Up to two more months for complex or numerous requests, with notice within the first month. The clock pauses while the business waits for details it needs to know what the request covers.
CCPA (California)
45 calendar days from receipt, for requests to know, delete or correct
One more 45 days, with notice and the reason within the first 45 days
PIPEDA (Canada)
30 days after receipt
Up to 30 more days in set cases, or longer to convert the data to an alternative format. Notice is due within 30 days.
Quebec private sector act (Law 25)
30 days after receipt. No reply counts as a refusal.
The business can't extend on its own; it can ask the Commission d'accès à l'information.
LGPD (Brazil)
Immediately in simplified form, or within 15 days of the request for a full declaration
None in the law. The ANPD can set different deadlines for specific sectors.
FAQ

DSAR questions, answered

What is DSAR software?

DSAR software collects data subject access requests, keeps them in one place and tracks each one against its deadline. With Enzuzo, requests come in through a form on the website or in the privacy policy, requests sent by email or phone are added by hand, and the dashboard shows how many days are left on each one.

Finding the personal data across a business's systems and deciding what to send back stays with the business's own team.

What is a Data Subject Access Request (DSAR)?

Who can submit a DSAR?

How long does a business have to respond to a DSAR?

Can a business charge a fee for a DSAR?

Can a business refuse to respond to a DSAR?

What happens if a business misses a DSAR deadline?

Track every data request in one place.

Free forever plan available. No credit card required.

★ 4.6/5 on G2 | Trusted by 30,000+ businesses worldwide