Discover context
Find personal data across the Salesforce estate and understand the records involved.
For risk and privacy
Make Salesforce privacy work an operating process.
POCAVI brings discovery, controlled action, sandbox protection, and operational evidence together for the people accountable for Salesforce data.
The operating rhythm
Make the work easier to see, decide, and improve.
Start with the responsibility your team already owns. POCAVI gives it a more connected route from signal to action.
Protect environments
Use masking and sandbox checks to reduce exposure while teams continue to work.
Respond consistently
Run subject-access, deletion, anonymisation, and breach workflows with a clear record.
Retain evidence
Keep the operating context needed to explain the work to the people who need to review it.
POCAVI Compliance
Start with the outcome your team owns.
Explore the product depth behind this workflow, then expand when shared Salesforce context makes the next decision better.
Explore ComplianceFocused adoptionStart with one workflow and the owner accountable for it.
Connected contextKeep the Salesforce estate, operational history, and evidence close to the work.
Clear next stepUse a workflow review to map the current problem to a practical starting point.
Risk, privacy and compliance teams
Every request starts from scratch
A subject access request means finding personal data across objects nobody has mapped, deciding what to redact, and then proving afterwards that it was all done properly.
- Personal data sits in custom objects and email records, not just Contact.
- A full-copy sandbox carries production PII to whoever has access.
- Erasure happens but the evidence is a screenshot in a folder.
- A breach clock starts and ownership is decided in the meeting.
10Compliance capabilities
72-hourBreach workflow with owners
EveryAction keeps evidence
FormatPreserving data masking
What changes
Find the person, everywhere they exist
Discovery runs across standard objects, custom objects with PII fields, files and email records, in every connected org rather than one at a time.
What changes
Keep test data useful and safe at once
Format-preserving masking means a sandbox behaves like production without being it. Names tokenised, emails masked, referential integrity intact.
What changes
Evidence as a by-product, not a project
Each erasure produces a record of systems processed, locations covered, records deleted and any overrides, exportable as a document a reviewer can keep.
Capabilities
Everything Compliance brings to this work
Compliance gives the team a practical route through the work that becomes urgent only when it has been left too long.
- GDPR SAR AutomationFinds a person across Salesforce, guides deletion or anonymisation, and retains an audit trail for the action.
- SAR Dashboard and Data PortabilityTracks requests as cases, drafts responses, exports a person's data, and keeps the audit record.
- Consent and Retention ManagementAssesses consent maturity and checks retention policies, overdue records, and conflicts.
Data Masking and Sandbox Checks Masks personal data while preserving relationships and identifies live PII or unsafe configuration in sandbox environments.
Sandbox Compliance Detects live PII, unsafe email deliverability, production endpoints, and stale sandbox risk.
Restorable Privacy Actions Snapshots original values before GDPR actions and provides a 30-day restore window.
Public Link Audit and File Content Scanner Finds public shared links and scans uploaded files for personal data across text, PDFs, spreadsheets, documents, and images.
PII Data Map Inventories PII fields by org with records-with-data counts and risk assessment.
DPIAs, Breach Workflow, and Register Supports DPIAs, processing records, breach response, and the evidence around privacy decisions.
Deletion Proof Cross-checks Salesforce and the audit record to provide a signed confirmation of erasure.
Questions
Before you book a demo
Which regulations does this cover?
The workflows are built around subject rights, breach timelines and processing records, which map to GDPR and to most equivalent regimes.
Is masked data still usable for testing?
Yes. Masking preserves format and referential integrity, so relationships between records survive and test scenarios still run.
What does the evidence document contain?
Systems processed, data locations covered, records deleted, retention overrides and issues, with timestamps, exportable as JSON.
Read next
Go deeper on the job itself
The product behind this
Pocavi Compliance
Discover, protect, respond, govern, and prove.