What Superset does

Superset Labs PBC operates a privacy compliance automation platform purpose-built for data brokers and adjacent data-intensive businesses. Founded by Zane Witherspoon (CIPP/US), the company addresses the fragmented US state-level privacy regulatory environment — including California's Delete Act and DROP, New Jersey's Daniel's Law, and emerging registration regimes in Texas, Vermont, Oregon, and Connecticut — alongside EU/UK GDPR obligations. Its six-product suite spans state registration filing, AI-driven DSAR/DSR inbox triage, end-to-end California Delete Request and Opt-out Platform (DROP) integration with SHA-256 hashed identity matching, automated data discovery across 6,000+ systems, and GDPR Article 27 representation for EU/UK data subjects.

The platform's technical core combines process automation (DSAR triage and GRC tool routing), cryptographic identity matching (SHA-256 with canonicalization rules for NDZ, EMAIL, PHONE, MAID, NVIN, and CTVID identifier types), and code-aware data mapping agents that monitor system changes. Superset monetizes primarily through annual SaaS subscriptions, supplemented by registration service fees (California CPPA registration at $6,600/year, Connecticut at $2,500/year) and EU/UK representative agent services. Go-to-market is hybrid: a self-serve product entry at ai.trustsuperset.com with a free trial, complemented by compliance-specialist-led enterprise sales booked through Calendly.

The company is registered as a Public Benefit Corporation in New York (431 E 20th St, Unit 9A), with a leadership team of approximately ten members plus three external advisors spanning AI, legal, economics, and design. Operating geographies include the US, EU, and UK. Superset has disclosed a single $300,000 seed round (July 2024) with no institutional investors publicly identified, making it a capital-efficient, founder-led entity positioned to capture the August 2026 California DROP mandate and January 2027 Connecticut registration deadline as near-term revenue catalysts. The customer base of roughly ten named logos spans sales intelligence (Warmly), data enrichment (Clay), AdTech (Visual Visitor), B2B marketing (Demandbase), identity resolution (persistent.id), and revenue operations (RevOptimal).

Name

Superset

Legal name

Superset Labs PBC

Website

https://trustsuperset.com

Company type

Private

Founded year

2024

Operating status

Operating

Headcount range

1–10 employees

Short description

Superset Labs PBC is a New York-based privacy compliance automation platform purpose-built for data brokers and AdTech companies. Its suite automates multi-state registration, AI-driven DSAR triage, and California DROP integration across the US, EU, and UK.

Ownership category

akta.pro rank

Product category

Privacy Compliance Software

NAICS

Computer Systems Design and Related Services (54151), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (518)

SIC

Services-Prepackaged Software (7372), Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Privacy Management (Consent, DSAR, RoPA) (HDADAFAH)

akta.pro secondary industry

Data Masking, Tokenization & De-identification (HDADAFAI)

Keywords

• Privacy compliance software
• Data broker compliance
• DSAR automation
• Privacy management platform
• Regulatory compliance automation

Headquarters

HQ city

New York

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations

Revenue model

1. SaaS Subscription - Privacy Compliance Platform: Annual subscription model for access to privacy compliance automation platform including registration, request processing, and reporting tools
2. Data Broker Registration Services: Filing and compliance services for state data broker registrations (California $6,600/yr, Connecticut $2,500/yr)
3. EU/UK Representative Agent Services: Article 27 representation services for companies serving EU and UK data subjects

Pricing tiers

Go-to-market motion2 records

Distribution channels2 records

Marketing channels5 records

Core offering

Superset is a software platform that automates privacy compliance for data brokers, covering state data broker registrations, Data Subject Access Request (DSAR) triage and processing, integration with California's Delete Request and Opt-out Platform (DROP), Daniel's Law removal workflows, GDPR Article 27 representation, and automated data mapping across 6,000+ systems. It combines a self-serve AI-driven product at ai.trustsuperset.com with human compliance specialist support for businesses required to comply with U.S. state and EU/UK privacy laws.

Product overview

Superset is a privacy compliance platform specifically built for data brokers, offering a unified suite of tools for registration, request processing, and reporting. The core portfolio includes: Privacy Inbox Automation for AI-powered DSR triage and workflow management; Data Broker Registration for state-level compliance filings; California DROP Compliance for end-to-end integration with California's deletion platform; Daniel's Law Compliance for New Jersey's 10-day removal requirements; EU + UK Representative Agent for GDPR Article 27 representation; and Self-Generating Data Mapping for automated data discovery across 6,000+ systems. The platform connects privacy teams (who handle inbox automation and request fulfillment) with engineering teams (who receive API-based routing for data operations) to maintain audit-ready compliance trails.

Differentiator

Problem solved

Functional benefit

Products and services

• Privacy Inbox Automation AI-powered workflow automation that detects valid Data Subject Requests from inbound emails, extracts key personal information, and routes responses through a repeatable, audit-friendly process. Integrates with Gmail, Outlook, and existing GRC tools; designed for businesses handling campaign-scale authorized agent floods and tight jurisdictional deadlines.
• Data Broker Registration Annual registration filing service that helps data brokers comply with state registration laws including California's Delete Act, plus Texas, Vermont, Oregon, and Connecticut. Offers a streamlined ~11-minute filing process with compliance specialists and an Accurate Filing Guarantee to help customers avoid penalties.
• California DROP Compliance End-to-end integration with California's Delete Request and Opt-out Platform (DROP). Pulls consumer deletion requests from the state system, pushes matched records to the broker's backend via the DROP API, and reports processing status back to the CPPA on the required 45-day cycle.
• Daniel's Law Compliance Compliance automation for New Jersey's Daniel's Law, which requires removal of personal data for covered public officials within 10 days. Automates intake, validation, routing, and fulfillment with litigation-ready audit trails and documentation.
• EU + UK Representative Agent Article 27 GDPR/UK GDPR representation service for companies serving EU and UK data subjects from outside those jurisdictions. Provides coverage model, communication support, and compliance setup with a designated representative in Paris, France (Superset Representatives SASU).
• Self-Generating Data Mapping Data discovery and mapping module that integrates with over 6,000 systems to detect where consumer data is stored. AI agents monitor new code and system changes to maintain a living data map document for compliance visibility.

Quantifiable outcome

• Data broker registration processing time reduced to approximately 11 minutes from start to finish
• +3 more outcomes

Named customers10 records

Segments4 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration4 records

AI capability3 records

Feature5 records

Partnerships

One partnership is on record.

• ClaycoreGTM or Marketing Partner · 18 July 2024Clay uses Superset's privacy compliance service for data broker obligations. Partnership built on trust and innovation - Clay recognizes that user trust is the foundation of sustainable growth. By partnering with Superset, Clay takes a proactive approach to privacy and compliance, ensuring they meet and exceed data regulations. Collaboration reflects shared vision to create a world where businesses thrive by putting privacy and trust first.

Scale indicators4 records

Recent moves6 records

Expansion highlights6 records

Broad incumbents

• Osano: Privacy and consent management platform offering DSAR handling and data mapping. Comparable in DSAR triage and SMB/mid-market positioning, though without California DROP or data-broker registration specialization.
• Ketch: Privacy and data-control platform offering DSAR automation, consent management, and data mapping. Overlaps with Superset's automation and mapping modules but serves broader enterprise use cases rather than data-broker-specific compliance.
• TrustArc: Established enterprise privacy platform providing DSAR, consent, and compliance workflow tooling. Overlaps with Superset in DSAR processing and privacy inbox automation but serves a broader enterprise audience without data-broker-specific focus.
• OneTrust: Largest horizontal privacy management platform offering consent, DSAR, GRC, and data-mapping tools across industries. Directly competes in DSAR automation and data-mapping, but does not specialize in data-broker registration or DROP integration the way Superset does.
• Didomi: Consent and preference management platform with DSAR and privacy-ops modules. Comparable to Superset's privacy inbox and consent workflows, particularly for European-headquartered customers, though without data-broker registration specialization.
• Securiti: Unified data-command platform covering DSAR automation, data mapping, consent, and AI governance. Competes with Superset on privacy inbox automation and data-mapping scale but targets large enterprises across verticals rather than data brokers specifically.

Direct peers

• Ethyca: Data infrastructure platform for privacy engineering offering automated DSAR fulfillment, consent, and data mapping. Direct competitor in AI-powered DSAR automation and developer-centric data-mapping workflows similar to Superset's self-generating data map.
• DataGrail: Privacy request automation platform focused on DSAR processing, data mapping, and consent orchestration. Closest direct competitor to Superset's privacy inbox automation and self-generating data mapping capabilities.
• WireWheel: Privacy operations platform providing DSAR automation, data mapping, and vendor risk management. Directly comparable in product scope to Superset's privacy inbox automation and data-mapping capabilities, targeting mid-market privacy programs.

Emerging players

• DeleteMe: Consumer-facing data-broker opt-out service that handles removal requests from data brokers on behalf of individuals. Adjacent rather than directly competing with Superset, but operates in the same data-broker removal ecosystem and could extend into broker-side compliance tooling.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat5 records

Key risks5 records

Key highlights6 records

Customer concentration

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles10 records

Funding overview

Funding rounds1 record

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Superset