Launch week: every idea card is free.Get Pro

SaaS ideas, mined from what people actually complain about.

Every idea comes from real Reddit posts, was researched against today's competitors, and survived an independent skeptic before it made the list.

GDPR and PII Compliance

Organizations struggle to discover, redact, and govern sensitive personal data across scattered systems while meeting privacy regulations like GDPR, HIPAA, and LGPD.

In their words

as we've added more SaaS apps and tools, why it's hard managing it all across all environment?

r/AskNetsec on Reddit

It's yet another expense. I also wonder about the privacy aspects of some of them

r/ECEProfessionals on Reddit

Those uploaded documents we sanitized as needed

r/legaltech on Reddit

The cloud based records system we currently use offers something like this, but it is stupid expensive and isn't very good.

r/LocalLLaMA on Reddit

not enough technical controls in preveil to prevent unintentional movement into our commercial m365 area

r/CMMC on Reddit

DLP can't scan the contents of files that you upload directly into prompts, so evaluation of the uploaded file for sensitive data doesn't occur.

r/MicrosoftPurview on Reddit

It was pretty disappointing to see my agent reaching out to a random company!

r/hermesagent on Reddit

that is the users real data now being shipped to a 3rd party

r/webdev on Reddit

how little the paperwork matches reality once you follow the data

r/sysadmin on Reddit

legal wants a list by the end of the month of every table and column holding personal data

r/SQL on Reddit

Working on one and my guess is that we are looking at 30k plus pages in over 1000 records.

r/CanadaPublicServants on Reddit

Most tools I've found only scan tickets after they're created. By then, the sensitive data is already stored and may have been seen by others.

r/sysadmin on Reddit

Only real control we had was calling the agency back on a number we looked up ourselves, not the one on the letterhead.

Hacker News

In the end, the process was cut short (counsel too expensive and not nearly familiar enough with tech).

Hacker News

Compliance, security, and data teams

Where they talk

  • r/gdpr
  • r/sysadmin
  • r/LLMDevs
  • r/cybersecurity
  • r/MicrosoftPurview
  • r/legaltech
  • r/SideProject
  • r/LocalLLaMA

Tools they use today

  • Microsoft Purview
  • Microsoft 365
  • Claude
  • Excel
  • Google Analytics
  • Google Workspace
  • SharePoint
  • Supabase

Why those fall short

  • Defaults change silently; no disclosure or consent, hard to audit
  • no enterprise agreement, no retention limits, data already left environment
  • Masking covers inputs only; rendered text and network bodies leak
  • no classification or enforcement; users cannot label data correctly
  • no way to mark relationships provisional or exclude from searches