KIOKET DSAR Management System

DSAR Lite

Securely manage Data Subject Access Requests from intake to disclosure and closure.

KIOKET hosts the service. Create your organisation’s account, verify your email, and invite the colleagues who may work on your requests. You do not need a server, a database, or a mail account of your own.

  1. 1

    Create an account

    Use your work email. KIOKET sends the verification link.

  2. 2

    Open the organisation

    You become its administrator and choose your case roles.

  3. 3

    Invite colleagues

    Only people you invite can join. Other organisations stay separate.

FICTIONAL WALKTHROUGH — NOT A GENUINE CASE

Example Harbour Trust. People, documents and dates are invented. This walkthrough is not a genuine case, sends no email, and accepts no upload.

One fictional DSAR

Intake to closure

Rowan Walkthrough · rowan.walkthrough@guided-demo.example. Fictional request for the demonstration membership file of Rowan Walkthrough at Example Harbour Trust for 2025 only.

  1. 01 Intake Now
  2. 02 Identity and deadline history
  3. 03 Search
  4. 04 Redactions and exemptions
  5. 05 Second-person acceptance
  6. 06 QA
  7. 07 Disclosure safety check
  8. 08 Closure

Step 1 of 8: Intake. Recording it only updates this fictional file.

Demonstration metrics — not genuine pilot results

Fictional cases
0
Genuine cases touched
0
Emails sent
0
Uploads accepted
0
Safety check passed
No
Closed
No

Where a demonstration case differs

A demonstration case uses the same screens. It cannot pass the genuine disclosure safety check, and it cannot send email, a file, or a disclosure.

  1. 1. Record

    Genuine case

    Identity is recorded only when this request needs it. Acknowledgement can be a real notice.

    Demonstration

    This fictional request records why identity was needed, when it was requested, and when sufficient information arrived. Acknowledgement is marked simulated and no email is sent.

  2. 2. Search

    Genuine case

    Searches can name the organisation’s own systems.

    Demonstration

    Only the demonstration register is recorded. No external search runs.

  3. 3. Documents

    Genuine case

    A real file can be registered by someone allowed to manage documents.

    Demonstration

    Register text only. Uploads are refused.

  4. 4. Withholding decisions

    Genuine case

    The person who recorded a withholding cannot accept it.

    Demonstration

    The same rule is live. Pat Reviewer’s separate account accepts it. The case manager cannot.

  5. 5. QA

    Genuine case

    A pass must be someone other than the case manager.

    Demonstration

    Pat Reviewer signs the pass, so it is not the same-person simulated label.

  6. 6. Disclosure

    Genuine case

    The safety check can pass only when every confirmation is true, including that no demonstration data is included. The app still does not send the pack.

    Demonstration

    The genuine safety check cannot pass. The inventory is labelled simulated and nothing is sent.

  7. 7. Closure

    Genuine case

    Closure follows a passed safety check and a disclosure record.

    Demonstration

    Closure is labelled simulated. The failed safety check is left failed.

  8. 8. Log

    Genuine case

    Audit records the signed-in person.

    Demonstration

    Audit stays in this demonstration organisation and is removed by Reset demo.

Install on this phone or computer

The installed app opens DSAR Lite and stays connected to KIOKET’s hosted service. You do not set up a server, database, or mail account.

Phone

In Chrome, open the browser menu and choose Install app or Add to Home screen.

Computer

In Chrome or Edge, use the install icon in the address bar, or the menu item Install DSAR Lite. The window opens on its own, without a browser tab.

How a request moves

Seven stages, from intake to closure. Deadlines use England and Wales working days. A clarification pause is recorded only when the question was reasonably necessary. A person still decides the exemptions and the disclosure. KIOKET’s managed processing service is separate and is not part of this app.

Permission matrix

Organisation Administrator status never grants case contents. Operational metadata is limited to case reference, status, responsible case manager and statutory deadline. Case contents require a separate assigned case role. Pilot Administrator status never supplies a case role.

Organisation administration

Manage organisation, users, invitations and settings

Admin only
Yes
Compliance Manager
No
DSAR Case Manager
No
Reviewer
No
QA Reviewer
No
Read-only
No
Pilot Administrator
No

Organisation administration

Non-content administrative audit trail

Admin only
Yes
Compliance Manager
Yes
DSAR Case Manager
No
Reviewer
No
QA Reviewer
No
Read-only
No
Pilot Administrator
No

Operational case metadata

Case reference

Admin only
Yes
Compliance Manager
Yes
DSAR Case Manager
Yes
Reviewer
Yes
QA Reviewer
Yes
Read-only
Yes
Pilot Administrator
Exceptional grant only

Operational case metadata

Status

Admin only
Yes
Compliance Manager
Yes
DSAR Case Manager
Yes
Reviewer
Yes
QA Reviewer
Yes
Read-only
Yes
Pilot Administrator
Exceptional grant only

Operational case metadata

Responsible case manager

Admin only
Yes
Compliance Manager
Yes
DSAR Case Manager
Yes
Reviewer
Yes
QA Reviewer
Yes
Read-only
Yes
Pilot Administrator
Exceptional grant only

Operational case metadata

Statutory deadline

Admin only
Yes
Compliance Manager
Yes
DSAR Case Manager
Yes
Reviewer
Yes
QA Reviewer
Yes
Read-only
Yes
Pilot Administrator
Exceptional grant only

Case contents

Data subject identity and contact details

Admin only
No
Compliance Manager
Yes
DSAR Case Manager
Yes
Reviewer
Yes
QA Reviewer
Yes
Read-only
Yes
Pilot Administrator
Exceptional grant only

Case contents

Request text

Admin only
No
Compliance Manager
Yes
DSAR Case Manager
Yes
Reviewer
Yes
QA Reviewer
Yes
Read-only
Yes
Pilot Administrator
Exceptional grant only

Case contents

Uploaded or collected documents

Admin only
No
Compliance Manager
Yes
DSAR Case Manager
Yes
Reviewer
Yes
QA Reviewer
Yes
Read-only
Yes
Pilot Administrator
Exceptional grant only

Case contents

Search and review results

Admin only
No
Compliance Manager
Yes
DSAR Case Manager
Yes
Reviewer
Yes
QA Reviewer
Yes
Read-only
Yes
Pilot Administrator
Exceptional grant only

Case contents

Redactions

Admin only
No
Compliance Manager
Yes
DSAR Case Manager
Yes
Reviewer
Yes
QA Reviewer
Yes
Read-only
Yes
Pilot Administrator
Exceptional grant only

Case contents

Exemption reasoning

Admin only
No
Compliance Manager
Yes
DSAR Case Manager
Yes
Reviewer
Yes
QA Reviewer
Yes
Read-only
Yes
Pilot Administrator
Exceptional grant only

Case contents

Disclosure contents

Admin only
No
Compliance Manager
Yes
DSAR Case Manager
Yes
Reviewer
Yes
QA Reviewer
Yes
Read-only
Yes
Pilot Administrator
Exceptional grant only

Case contents

Other substantive case information

Admin only
No
Compliance Manager
Yes
DSAR Case Manager
Yes
Reviewer
Yes
QA Reviewer
Yes
Read-only
Yes
Pilot Administrator
Exceptional grant only