Data Export & GDPR Compliance
PMSuite includes a built-in GDPR module that lets you manage data-portability requests, erasure rights, consent records, and removal requests for customers and leads. The module is designed to help your organization respond to data-subject requests without manual data gathering.
Who can use it
Super-admin, admin, and tenant-admin roles can access GDPR settings and process data-subject requests. Non-admin employees and clients cannot view or manage GDPR configuration.
Prerequisites
- GDPR compliance mode must be enabled in Settings before the module's features are active.
- GDPR settings are saved per company — each tenant manages its own configuration independently.
How to access
There are two entry points:
- GDPR module page — open the sidebar, navigate to Workspace, and select GDPR. The direct URL is
/account/gdpr. - GDPR Settings — open Settings from the sidebar, then select GDPR Settings from the settings list. This is where you enable or disable GDPR compliance mode and configure each tab.
GDPR Settings tabs
When you open GDPR Settings, you see the following tabs:
General
Toggle GDPR compliance mode on or off for your company. When enabled, a Show GDPR link in customer navigation/footer toggle becomes available — turning this on adds a visible GDPR link to the client-facing navigation and page footer so customers can access their data rights directly.
Right to data portability
Configure how your organization handles data-portability requests. When a customer or lead requests a copy of their personal data, this tab governs the response workflow and the data categories included in the export.
Right to be informed
Manage the information you provide to data subjects about how their data is collected and processed. Use this tab to define or link to your privacy notices and data-processing disclosures.
Right to Erasure
Configure the process for handling erasure ("right to be forgotten") requests. This tab lets you define how erasure requests are received, reviewed, and fulfilled.
Right of Access / Rectification
Manage requests from data subjects who want to view the personal data you hold about them or correct inaccuracies. This tab covers both access requests and rectification workflows.
Removal Request (Customer / Lead)
Handle removal requests specifically for Customer and Lead records. This is where requests to delete a customer or lead's data are submitted and tracked, separately from general erasure requests.
Consent Settings
Define the consent categories your organization collects (for example, marketing communications, data processing, third-party sharing). Each consent type can be individually configured.
Consent Lists
View and manage the actual consent records — which data subjects have given or withdrawn consent, and for which categories. This tab provides the audit trail for consent management.
Exporting data
PMSuite provides data export capabilities in several areas of the platform. The table-level Export action is available on modules such as Leads, Employees, Expenses, and Attendance (where the "Employee can export data" toggle in App Settings controls whether non-admin employees can use it).
For GDPR-specific data-portability requests, the Right to data portability tab in GDPR Settings governs the response. When a data subject requests their data, an administrator processes the request through this tab.
Effect on other features
| Area | How GDPR connects |
|---|---|
| Client portal | When "Show GDPR link in customer navigation/footer" is enabled, clients see a GDPR link in their portal navigation to submit data requests. |
| Consent tracking | Consent records created here apply across the platform — any module that collects personal data can reference the consent status. |
| Removal requests | Processing a removal request through the Customer/Lead tab affects the corresponding records in the Sales module. |
Limitations
| Limitation | Workaround |
|---|---|
| GDPR settings are per-company — there is no global template to push GDPR configuration across multiple tenants at once. | Configure each tenant individually, or document your standard settings for manual replication. |
| The module does not auto-detect which data falls under GDPR scope. | Maintain an internal data-mapping register alongside the GDPR module to ensure all personal-data categories are covered. |
Troubleshooting
I get "Access Denied" when trying to open GDPR Settings. Confirm your role is super-admin, admin, or tenant-admin. Earlier versions had an access-control issue that has been resolved — if you recently changed roles, log out and back in so the updated permissions take effect.
GDPR link is not appearing in the client portal footer. Check that both GDPR compliance mode is enabled (General tab) and the "Show GDPR link in customer navigation/footer" toggle is turned on. The link only appears when both conditions are met.