Skip to main content
ScrubMetadataPrivacy decisions, backed by evidence.

Check what a file carries before you disclose it.

A rights-response file can still carry GPS, author history or comments after the visible review. ScrubMetadata Professional brings local metadata removal and six EU privacy-office workflows into one workspace. Supported raw files stay in your browser; the decision to disclose remains yours.

Representative scenario using example data; not live customer data or a compliance determination.

Verify it yourself

How can we check that supported files stay local?

Browser-local file processing: supported raw files and their raw metadata stay on the browser processing path. Account and minimised workflow evidence can be sent to the service. Process a synthetic file in your approved workspace, then inspect the request bodies in the browser’s Network panel.

A cleaned file can be ready on your device while a linked compliance record is still pending. Check the processing report before relying on that record; an incomplete evidence handoff needs review.

Review file-safety scope
  1. 01

    Open Network

    In your approved Professional workspace, open your browser’s developer tools and select the Network panel.

  2. 02

    Process a test file

    Use a synthetic file in a supported format. Inspect it, remove metadata, and download the verified output.

  3. 03

    Inspect the requests

    Check the request bodies: supported raw file bytes remain local. Minimised workflow evidence may be sent to your organisation’s workspace.

The Professional workspace

Which privacy-office jobs does Professional cover?

ScrubMetadata Professional brings file safety, rights requests, DPIAs, processing records, breach work and DPO operations into one workspace for an EU privacy office. Supported raw files are processed in the browser. Your team reviews the evidence and makes the disclosure, assessment and notification decisions.

  1. 01

    File Safety

    Inspect, sanitise and independently check supported files in the browser before they leave a colleague’s device.

    Explore File Safety
  2. 02

    DSAR

    Track the response deadline, review disclosure files, and preserve an accountable completion record.

  3. 03

    DPIA

    Prepare the assessment, retain version history and DPO opinion, then record the decision.

  4. 04

    RoPA

    Maintain processing records and connected inventory, processor, subprocessor, and transfer context.

  5. 05

    Breach Evidence

    Track the 72-hour assessment clock from recorded controller awareness and prepare notification evidence for review.

  6. 06

    DPO Operations

    Run the work queue, tasks, approvals, controls, and management evidence in one place.

Regulatory orientation

Which GDPR duties do these workflows support?

The map links GDPR provisions to the privacy-office records your team can prepare and review in Professional. A record or export supports that work; it does not establish that the organisation has met its legal duties. Applicability, completeness and final decisions remain your team’s responsibility.

Art. 12 to 22Data subject information and rightsDSAR intake, deadline, and response evidence
Art. 25Data protection by designLocal file-safety processing support
Art. 28Processor relationshipsProcessor and subprocessor review context
Art. 30Records of processingRoPA records and export
Art. 32Security of processingFile-safety and control evidence support

Article references: Regulation (EU) 2016/679.

A defined offer

What is included in the Professional price?

Professional covers one EU privacy office and the six workflows shown above. Supported raw-file processing stays in the browser. Review the seat allocation, format limits and human decision steps before applying; account and minimised workflow records support the service. Monthly and annual prices are shown alongside.

View full pricing and inclusions
USD 999per month, plus VAT where applicable

Annual option: USD 9,990 per year.

  • Up to 20 allocated seats in one organisation; pending invitations count
  • Six daily privacy-office workflows
  • 17 accepted file extensions for local processing
Request access
EU privacy workflows and metadata removal · ScrubMetadata