Visual, interactive diagrams illustrate how personal data enters your organization, where it is processed internally, and which third parties it is shared with. Clickable nodes link to the underlying data inventory entries.
Interactive data flow diagram with systems and third-party transfers

​
Reading the flow diagram

  • Sources — where data enters: web forms, mobile apps, imports, partner feeds.
  • Internal processing — the systems that store and transform data, colored by data sensitivity.
  • Third-party transfers — data leaving your perimeter to vendors and sub-processors, with the receiving party and purpose.
Filter the diagram by data category, legal entity, or processing purpose to answer questions like “where does customer health data go?” in seconds.

​
Third-party and international transfers

TruePrivacy automatically detects data leaving your perimeter to sub-processors and partners by analyzing integration configurations and outbound flows. For each international transfer, map the transfer mechanism — Standard Contractual Clauses, adequacy decision, or Binding Corporate Rules:
1

Review detected transfers

New third-party destinations appear in the flow diagram flagged “unmapped” until documented.
2

Assign the transfer mechanism

Choose SCCs, adequacy, or BCRs, and link the supporting agreement from the vendor record.
3

Monitor for changes

If a destination changes region or a mechanism lapses, the transfer is re-flagged for review.
Transfers happening outside integrated systems — manual file exports, email — can be documented manually within the mapping interface, so the diagram reflects your complete data landscape.
Flow diagrams export as images for inclusion in DPIAs, audit responses, and board reporting.