TerraTrue is a collaborative web platform designed to make privacy and security reviews simple and accessible for fast-moving teams. Using an intuitive question-and-answer format, TerraTrue allows privacy managers to oversee multiple projects while enabling teams to seamlessly incorporate privacy and security throughout each stage of their projects.
How TerraTrue Works
TerraTrue follows a straightforward three-step process to guide teams through initiating and completing privacy and security reviews:
-
Launch a Review via Launch Creation
The project owner initiates a privacy, security, or third party review by creating a “Launch” in TerraTrue or through one of TerraTrue’s integrations.- Specific review tracks, such as third party reviews, can be created through use of launch type.
-
Document Your Data via Intake
After Launch creation, a knowledge owner, typically the business user leading the creation of the feature, initiative, or campaign, completes a variety of workflows. In TerraTrue, workflows are powerful question and answer forms that documents and assess the launch’s privacy, security, or third party risk.- Your organization may set up a screener (Launch Creation Workflow), to route the launch to the proper type of review based on the inputs from the Launch creator.
- For privacy reviews, TerraTrue supplies a customizable Data Spec to outline how the project will handle data. This brief workflow (often under five minutes) covers key aspects of data use, including collection, sharing, and retention.
-
Receive Tailored Privacy and Security Guidance via Review
TerraTrue provides a privacy worksheet that dynamically allows privacy experts to assess the launch with a set of tailored questions based on the Data Spec and your organization’s Launch history. Once the privacy worksheet is complete, TerraTrue flags and documents any risks and provides a list of recommended actions to ensure the project is secure, compliant, and ready to ship.- Your organization may also set up additional workflows, such as a Launch Summary Workflow) to conduct more specialized reviews.
What is a Launch?
A Launch is the core unit within TerraTrue, serving as a “ticket” that notifies your privacy, third party risk, or security team of a project requiring review—be it a new product, feature, initiative, campaign, or vendor partnership. Think of it as a structured workflow that allows you to track products, features, initiatives, campaigns, and processes from initiation through the entire review process. Launches take only a few seconds to create and can be created directly in TerraTrue or through integrations.
What do I need to know before I start using TerraTrue?
Launches can track any project that carries risk: whether that is privacy, security, or use of a third party.
-
Privacy & Security: Anyone with a clear understanding of how a project will use data can request and track a privacy review by creating a launch in TerraTrue.
- For new software features, that’s usually a product manager or engineer.
- For projects involving employee data, it’s probably an HR professional.
- For onboarding new eCommerce advertising tools, it’s more likely to be a marketing director or manager.
- Many TerraTrue customers start off by giving a few specific teams or product leads the ability to create launches based on a product roadmap. Over time, it's easy to expand your privacy program by bringing more people into the fold.
- Third Party: Anyone who is requesting the use of a new third party can request a third party review through a launch in TerraTrue. A third party risk manager may send a third party assessment through TerraTrue to the third party contact to gather details about how the third party uses data and link it within a launch and associate with privacy, security, and risk reviews. Third party launches can also be configured to assign a third party to a third party. Learn more about third party launch types here.
Launches can fit flexibly into your team’s culture and processes
TerraTrue can track every item on your product roadmap or focus solely on those using personal data in new ways. If tracking only certain items, it helps to educate Launch creators on which types need review—this can be done through an onboarding session or written guides. If needed, we also offer template materials to support training. Contact us if you need any assistance or materials to help with training and adoption across your organization.
Launches work best when they’re created as early as possible
TerraTrue’s secret sauce is that it helps privacy managers keep tabs on projects from the very beginning of the project lifecycle. Creating a launch takes only a few seconds and immediately notifies the privacy team that they'll have a product or feature to review in the near future.
Launches can integrate with the tools you’re already using
It’s super simple to create launches directly in TerraTrue, but you can also create launches from Slack, Jira, Github, IronClad, Rally, email, and via cloud monitoring (GCS, AWS) using our powerful integrations.