Trace where every type of
PII lives in your stack
A layered, left-to-right map showing how personal information enters, processes, stores, and exits your organization. Click any PII type to highlight only the paths carrying it. Auditor-grade evidence of data accountability.
Law 25 administrative monetary penalty — or 2% of worldwide turnover
1 Quebec Law 25
Start Free Assessment| Processing Activity | Legal Basis | Data Categories | Retention |
|---|---|---|---|
| Customer Onboarding | Contract | Name, Email, ID | 7 years |
| Email Marketing | Consent | Email, Preferences | Until withdrawal |
| Analytics | Legitimate | Usage, Device | 2 years |
| HR Processing | Contract | SIN, Banking | 7 years |
Find personal data you didn't know you had.
Canuckt's discovery engine scans your connected systems — CRM, cloud storage, email, databases — and surfaces personal information flows you didn't know existed. Average businesses find 3.5× more PII than expected.
Request a demoAutomated Records of Processing Activities.
Law 25 and PIPEDA require documented data inventories. Valdra automatically maintains your ROPA as your systems change — new integrations, new vendors, new data types are detected and logged.
Request a demoAdditional features
Request a demoFour-Layer Lineage View
Sources (consent forms, intake) → Internal apps → Storage (databases, file systems) → Third-party vendors. Industry-standard Sankey layout.
Auto-Derived Edges
Vendors aren't orphaned — we automatically pair each vendor with the asset whose data types overlap most. No manual flow drawing required.
PII-Type Filter Chips
Click "email" or "SIN" or "health" — only paths carrying that data type stay lit, everything else dims. Answers the auditor question "where does X end up?".
Sensitivity Heat-Ring
Red ring = node holds sensitive PII (SIN, health, passport, biometric, minor). Amber = medium. Slate = low. Risk visible at a glance.
CLOUD-Act + Cross-Border Pills
Each node tagged with US CLOUD Act exposure and cross-border data transfer flags — Law 25 art. 17 disclosures derive directly from this.
PNG Export
One-click 2x retina PNG for your ROPA appendix, PIA exhibits, or board pack.
Learn more about Valdra
Get compliant and build trust
Join hundreds of Canadian organizations using Valdra to automate their privacy obligations — no consultants required.
🍁 Canadian data residency · PIPEDA compliant · SOC 2 in progress
