Case Study: LastPass strengthens AI governance and privacy oversight with DataGrail

LastPass pulls an accurate RoPA in seconds with DataGrail

LastPass, a leader in identity management founded in 2008, sought to embrace the potential of AI while protecting customer trust and meeting its privacy obligations. To build a scalable AI governance program, they partnered with the vendor DataGrail and utilized its privacy management platform to conduct risk assessments and maintain a central record of processing activities.

DataGrail's solution provided LastPass with an intuitive system for privacy impact assessments and a living Record of Processing Activity (RoPA) that offers real-time insight into data usage. This enabled LastPass to efficiently empower business partners to innovate while upholding its security commitments. As a result of implementing DataGrail, LastPass established a robust, cross-functional AI governance program and was recognized as a nominee for the 2025 Data Privacy Hero Awards for its leadership in consumer trust.

LastPass

Steve Irlbacher

Associate General Counsel and Data Protection Officer