Process an erasure / DSAR deletion request in under an hour — without a lawyer

The job

A user asks to be forgotten. You soft-delete their account in the app — but soft-delete is not erasure. Copies linger in backups, billing exports, analytics warehouses, support tickets, and the log stream your “delete user” button never touched.

Regulators and data subjects do not want a screenshot of your admin panel. They want a clear story: what you removed, from where, and when — with something you can hand to a customer or file in your records.

How it works

1. Intake — Register the request (DSAR / GDPR erasure / offboarding) and the subject identifier your systems use.
2. Verify identity — Confirm the request matches your policy (logged-in user, email match, or your documented manual check). We do not skip this step.
3. Runbook — Walk a scoped checklist: app database, object storage, billing, analytics — preview counts before anything is wiped.
4. PDF certificate — Export a signed, datestamped attestation you can send to the requester or keep for your records.

Trust proof

No invented uptime stats or customer logos — only what we can point to today.

• Live status — Human page at /status/; JSON probes of public pages: /api/status/waymark
• Changelog — Shipped-only public entries at /changelog/ (newest first; no vapor roadmap).
• Transparent pricing — Stated below; paid tier price is not set yet. Compliance Brief is a different product (secondary link only).

Who it’s for

Founder-led SaaS, ≤10 people, often EU/UK, usually without a DPO. Solo or vibe-coded products where the founder still answers privacy@ emails.

Not for teams shopping OneTrust or enterprise GRC suites — if you need cookie consent orchestration across 40 subsidiaries, this is not that product.

Pricing

Free — 1 completed deletion per UTC month per workspace. Connect the built-in sandbox source (demo data) to finish a signed PDF/JSON certificate without host credentials. No credit card.

Paid tier — Amount TBD. We will publish a price before checkout is armed; until then the API reports checkout_not_armed (and a second free completion in the same month returns monthly_cap_reached + checkout_not_armed) — no fake buy button.

Need quarterly compliance evidence packs (licenses, dependencies, signed digests)? Compliance Brief is live at $297/quarter — separate from Deletion.

FAQ

GDPR timelines? You generally have up to one month to respond to a valid erasure request (extendable in complex cases). This tool helps you execute and document faster; it does not replace legal advice on whether an exception applies.

What we do NOT cover yet

• Automatic erasure across every third-party SaaS you ever plugged in (Stripe, Intercom, etc.) — you still own vendor subprocessors.
• Proof that offline backups were overwritten — attestations cover what you run through the runbook, not your tape vault.
• Legal review of your privacy policy or DPA templates.
• Cookie banners, DPIAs, or enterprise DSR workflow at OneTrust scale.

Start a deletion request

Creates a Deletion workspace on the free tier. You get a one-time login link and owner key — save them when shown; we do not email secrets.

Add badge

Amplify Deletion without outreach: embed a public SVG badge that links here with a #ref= hash (not a query string). Default code is waymark. Codes are sanitized to [a-z0-9_-], max 64 characters.