Dastra
- Company typePrivate
- Founded2020
- HeadquartersSaint-mandé, France
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
Dastra firmographics
Firmographics- Name
- Dastra
- Legal name
- Dastra
- Website
- https://dastra.eu
- Company type
- Private
- Founded year
- 2020
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Ownership category
- akta.pro rank
Dastra industry classification
Industry- Product category
- Privacy Compliance Software
- NAICS
- Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (518)
- SIC
- Services-Computer Processing & Data Preparation (7374)
- akta.pro primary industry
- Privacy Management (Consent, DSAR, RoPA) (HDADAFAH)
Keywords
Where Dastra is headquartered
LocationHeadquarters
- HQ city
- Saint-mandé
- HQ country
- France
- HQ region
- Europe
Offices1 record
Markets served
Dastra business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Infrastructure, Marketing or Sales, Operations
Revenue model
- SaaS Subscription: Subscription-based SaaS model with pricing varying by company size (number of employees) and modules selected. Offers dedicated modules for specific use cases like cookies consent management and AI governance.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Freemium | Monthly | Free Trial - Full feature access for 1 month |
| Subscription | Annual | Enterprise - Multi-entity/corporate group support |
Go-to-market motion1 record
Distribution channels3 records
Marketing channels8 records
Dastra product offering
Product offeringCore offering
Dastra is a SaaS-based AI & Data Governance Platform that helps organizations manage privacy and AI regulatory compliance (GDPR, AI Act, ePrivacy, NIS2, DORA, UK GDPR). It centralizes records of processing activities, data subject requests, DPIAs, data breaches, vendor contracts, cookie consent, risk and compliance evidence through modular, collaborative workflows powered by an integrated AI wizard.
Product overview
Dastra is an AI & Data Governance Platform offering a modular SaaS solution for regulatory compliance management (GDPR, AI Act, NIS2, DORA). The platform consists of a core unified privacy management suite with ROPA management, Data Subject Requests, Contract Management, Data Mapping, Questionnaire/Audit, Risk Management, Data Breaches, PIA/DPIA, Task Planning, Advanced Watch, and Cookie Consent modules. Add-on modules include AI Governance for AI Act compliance and Compliance Management for multi-framework orchestration. Solutions are tailored by role (DPO, CISO, External DPO, Risk Manager, CDO, General Management) and cover regulations including GDPR, AI Act, ePrivacy, and UK GDPR.
Differentiator
Problem solved
Functional benefit
Products and services
- Record of Processing Activities (ROPA) Comprehensive record of processing activities management module with collaborative features, more than 300 pre-designed templates, AI-powered record generation, and guided step-by-step workflows for building and maintaining GDPR Article 30 records.
- Data Subject Requests (DSR) Module for automated collection and processing of data subject rights requests (access, deletion, rectification, portability) via widget, form, email, or API, with a secure communication portal for responding to requesters.
- Contract Management Module for automated generation of Data Processing Agreements (DPAs) and Standard Contractual Clauses from the register, with native DocuSign integration for electronic signature of contracts and stakeholder signature campaigns.
- Data Mapping Bottom-up data mapping module that visualizes data flows, tracks data through business processes, documents schemas, and manages authorization for GDPR compliance.
- Questionnaire Management / Audit Module to design, plan, and launch questionnaires for DPIAs, LIAs, TIAs, third-party risk assessments, and compliance checks, with pre-designed templates and a drag-and-drop editor.
- Risk Management Module to identify, assess, manage, and control privacy, strategic, operational, financial, and third-party risks, with visual dashboards and automated mitigation plans.
- Data Breaches Module for centralized incident and breach reporting with workflow management, 72-hour GDPR notification compliance tracking, and audit trail documentation.
- Data Protection Impact Assessment (DPIA/PIA) Guided privacy impact assessment module with CNIL PIA import support, automated question pre-filling, risk heat maps, and integrated action plans.
- Task Management / Planning Agile project management board with drag-and-drop workflow for planning, allocating, and tracking compliance action plans with customizable notifications.
- Advanced Watch Regulatory and technical watch tool providing updates on GDPR legislation, case law, and data protection standards with customizable RSS feeds.
- Cookies Consent Management Platform Dedicated cookie consent module with site scanning, automatic cookie and service categorization, Google Tag Manager integration, and consent proof storage for GDPR and ePrivacy compliance.
- AI Governance (Record of AI Systems) AI systems registry and governance module for mapping AI models, analyzing EU AI Act compliance risks, generating transparency notices, and conducting regular AI system reviews.
- Compliance Management Centralized compliance module that connects frameworks, requirements, controls, risks, and audits with automated evidence collection across GDPR, AI Act, ISO, and Europrivacy standards.
Quantifiable outcome
- 50% reduction in audit preparation time
- +4 more outcomes
Companies that use Dastra
Customer profileNamed customers20 records
Segments10 records
Ideal customer profiles5 records
Dastra technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration4 records
AI capability4 records
Feature7 records
Dastra partnerships and signals
Strategic signalPartnerships
One partnership is on record.
- Certified IntegratorsminorNetwork of recognized integration partners who know Dastra well and are capable of handling all connection requests and custom API connector development.
Scale indicators10 records
Recent moves6 records
Expansion highlights6 records
Dastra competitors and assessment
Company assessmentDirect peers
- OneTrust: OneTrust is the leading privacy, security, and data governance platform offering ROPA, DSR, consent management, and AI governance modules — directly competing with Dastra across nearly every feature area, though with a broader enterprise footprint and larger sales organization.
- Didomi: Didomi is a French-headquartered consent management platform (CMP) that directly competes with Dastra's Cookies Consent module and broader privacy compliance suite, particularly strong in European digital media and retail.
- TrustArc: TrustArc is a long-standing privacy compliance management platform offering GDPR tools, DSR automation, vendor risk, and consent management — overlapping directly with Dastra's ROPA, DSR, and compliance modules for enterprise and mid-market customers.
- Cookiebot: Cookiebot (Usercentrics group) specializes in cookie consent and scanning for GDPR/ePrivacy compliance — directly comparable to Dastra's Cookies Consent module and a frequent head-to-head choice for digital businesses in Europe.
- Iubenda: Iubenda offers privacy and cookie compliance solutions including consent management, privacy policy generation, and DSR tools — competing with Dastra primarily in the SME segment and on the cookie/consent use case.
Emerging players
- Securiti.ai: Securiti offers an AI-powered Data Command Center that unifies privacy, security, and data governance — competing with Dastra's AI-driven approach to ROPA generation, DSR automation, and AI Act readiness across mid-market and enterprise accounts.
- BigID: BigID is a data intelligence platform with strong privacy and security use cases (data discovery, classification, DSR), providing similar data-mapping and PII-aware capabilities to Dastra's Data Mapping module but oriented toward larger enterprise deployments.
- DataGrail: DataGrail is a privacy management platform focused on DSR automation, ROPA, and vendor management — directly comparable to Dastra's DSR and Contract Management modules but primarily serving North American mid-market and enterprise.
- Ethyca: Ethyca (now Sagittal) provides privacy engineering and data mapping automation that overlaps with Dastra's data mapping and ROPA capabilities, with a developer-oriented approach to privacy compliance.
Broad incumbents
- Collibra: Collibra is a broader data intelligence and governance platform with privacy and compliance capabilities that overlap with Dastra's data mapping and CDO-focused offerings, but its primary focus is enterprise-wide data cataloging rather than privacy-specific workflows.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks6 records
Key highlights7 records
Customer concentration
Dastra social profiles
Digital presenceDastra compliance and trust
Trust signalCompliance2 records
Dastra financial estimates
Financial estimateRevenue estimate
Valuation estimate
Dastra leadership team
Management profileNumber of profiles
Profiles4 records
Dastra funding detail
Funding detailFunding overview
Funding rounds2 records
Investors3 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Dastra M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Dastra
What does Dastra do?
Dastra is a SaaS-based AI & Data Governance Platform that helps organizations manage privacy and AI regulatory compliance (GDPR, AI Act, ePrivacy, NIS2, DORA, UK GDPR). It centralizes records of processing activities, data subject requests, DPIAs, data breaches, vendor contracts, cookie consent, risk and compliance evidence through modular, collaborative workflows powered by an integrated AI wizard.
Is Dastra a public or private company?
Dastra is a private company. It is classified as venture growth investor backed and is currently operating.
When was Dastra founded?
Dastra was founded in 2020. It employs 11 to 50 people.
Where is Dastra based?
Dastra is headquartered in Saint-mandé, France, in the Europe region.
How does Dastra make money?
One revenue line is on record: saaS Subscription.
Who are Dastra's main competitors?
Direct peers on record are OneTrust, Didomi, TrustArc, Cookiebot and Iubenda. Emerging players are Securiti.ai, BigID, DataGrail and Ethyca. Collibra is listed as a broad incumbent.
Does Dastra have an API?
Yes. Dastra offers a well-documented REST API and fully customizable native connectors for all synchronization needs. The API enables connecting repositories to Dastra, syncing data catalogs, managing users, and automating workflows. SSO (SAML, OpenID) and webhook functionality are available for data protection and workflow automation. Developer documentation is at doc.dastra.eu/v/en/api-references/authentification.
What industry is Dastra in?
Dastra's product category is Privacy Compliance Software. Its primary akta.pro industry code is HDADAFAH, Privacy Management (Consent, DSAR, RoPA). Its NAICS code is 518 and its SIC code is 7374.