CCPA & CPRA Data Inventory & ADMT Analyzer — 2026–2028 Readiness Tool

▶ Try it first: Open the free interactive demo — run the ADMT scope check and preview your 2026–2028 timeline.

Know exactly what your organization must do to be CCPA/CPRA compliant for 2026–2028. A self-contained, plug-and-play tool that maps your personal-information processing, analyzes your automated decision-making, and generates a dated compliance roadmap — built around the ADMT, risk-assessment, and cybersecurity-audit regulations the CPPA finalized in September 2025.

What it does

• Applicability engine — determines whether the CCPA applies and which of the three new obligations you face, with your specific deadlines and revenue-based cybersecurity-audit tier.
• Data inventory builder — the 12 statutory PI categories and 13 sensitive-PI categories, sources, purposes, recipients, sell/share, retention. Auto-flags risk-assessment triggers. Covers employee/HR and B2B data.
• ADMT analysis — a three-question test per tool that determines whether it's in scope and lists the exact obligations (pre-use notice, opt-out, access, human appeal) and deadline.
• Risk register — automatically aggregates every trigger from your inventory and ADMT work into one trackable list.
• 2026–2028 roadmap — a dated action plan generated from your answers, with progress tracking.
• Export — JSON save/restore, inventory & ADMT CSVs for counsel, and print-to-PDF report.

Plug-and-play

• Single self-contained file — no fonts, CDNs, or internet required. Safe for locked-down environments. Data stays in the browser.
• White-label with your organization name in one line.
• Key dates baked in and verified: regs effective Jan 1 2026 · ADMT Jan 1 2027 · risk assessments Dec 31 2027 / attestation Apr 1 2028 · cyber-audit Apr 1 2028/2029/2030 by revenue tier.

Awareness and planning aid, not legal advice. Verify against the CPPA's final regulation text and qualified counsel.