Double AIgents DSAR service
GDPR DSAR deadlines, breach triage, AI tool checks, HR retention and letters (UK/EU/CH)
| Endpoint | https://www.doubleaigents.com/api/mcp (streamable-http) |
|---|---|
| Registry version | 1.2.0 |
| Now | 10 tools · grade A (97) · pin ts_6599438bb099a3de1bd339372af6ad10 · protocol 2025-06-18 |
| First / last listed | 2026-10-31 01:22 UTC / 2026-10-31 01:22 UTC |
| Grade over time | 2026-10-31: A (97), 10 tools |
Is this your server? Own a server? ToolFit hosted watch re-checks it every 24 h ($0.25 per 30 days) or 6 h ($0.60) and sends you an HMAC-signed webhook when its tools or grade change: POST https://api.youraitools.co/toolfit/v1/watch. To opt out, see About & opt-out.
Tools: dsar_deadline dsar_quote dsar_service_info dsar_request_scoping breach_clock dsar_letter_template breach_triage ai_tool_check hr_retention dsar_search_checklist
dsar_deadline | Calculate the statutory deadline for answering a data subject access request in the UK, the EU/EEA or Switzerland, with the rule that applies and the extension position. General information, not legal advice. params: jurisdiction*, received_date*, extended |
dsar_quote | Fixed price from Double AIgents for preparing a DSAR response, by pack size in pages after de-duplication. Also gives the retainer price (15% off). Excludes VAT. params: pages*, currency |
dsar_service_info | What the Double AIgents DSAR service covers: scoping, collection guidance, de-duplication, redaction, exemption recommendations, two independent reviews, secure delivery, data handling, jurisdictions and partner arrangements. params: none |
dsar_request_scoping | Explains how to start free scoping and returns a prefilled email (mailto URL) to james@doubleaigents.com. Sends nothing and stores nothing. Do not pass the requester's personal data or the request letter. params: organisation*, contact_name*, contact_email*, jurisdiction*, date_received*, approx_volume |
breach_clock | When a personal data breach must be notified to the regulator: 72 hours from awareness in the UK and EU/EEA (Art. 33), "as soon as possible" in Switzerland (revised FADP Art. 24). Gives the deadline, the rule, the processor and individual-notification position, and the facts the regulator will ask for. The controller decides whether to notify. General information, not legal advice. params: jurisdiction*, aware_at* |
dsar_letter_template | Plain-text letter template, in British English with [placeholders], for an acknowledgement, an extension of time or a request for clarification of a data subject access request, under UK, EU/EEA or Swiss law. Fills in the dates if received_date is given. General information, not legal advice. params: kind*, jurisdiction*, received_date, due_date |
breach_triage | A likely-reportability view on a personal data breach (UK, EU/EEA, Switzerland), following the ICO guide "Personal data breaches: a guide" and EDPB Guidelines 9/2022: whether notifying the regulator and telling the people affected is likely or unlikely to be required, the factors behind that view, and the notification deadline. The controller decides. General information, not legal advice. Do not params: jurisdiction*, aware_at*, people_affected*, special_category*, recipient*, recoverable*, encrypted* |
ai_tool_check | Screens a planned use of an AI tool: whether a DPIA is likely to be required (Art. 35(3), the ICO high-risk list, the WP248 criteria; FADP Art. 22 for Switzerland), EU AI Act risk flags (Annex III high-risk areas, especially employment; Art. 5 prohibited practices such as emotion recognition at work; current application dates after the Digital Omnibus), and automated decision rules (GDPR Art. 22, params: use_case*, processes_personal_data*, special_category*, employees_or_candidates*, automated_decisions_with_significant_effect*, new_technology*, large_scale*, jurisdiction* |
hr_retention | Recommended retention period for a common UK HR record, whether it is statutory or only recommended, and the source (HMRC, Home Office, RIDDOR 2013, Working Time Regulations, Limitation Act 1980, ICO, DBS). UK only for now. General information, not legal advice. params: record_type*, jurisdiction |
dsar_search_checklist | Where to search when answering a subject access request, especially from an employee: Microsoft 365 (Exchange and archives, shared mailboxes, Teams, OneDrive, SharePoint), other collaboration tools, HR, payroll, recruitment, CCTV, access logs, devices, line manager notes, paper files, occupational health and backups; search-term tips; and the search standard (UK GDPR Art. 15(1A) reasonable and pro params: organisation_type* |
Entries describe changes in tool definitions. They are not statements about a server, its quality or its author. The grade measures how the tool definitions fit model providers (token cost, schema compatibility, confusable names) as scored by the ToolFit engine at the time of the listing. JSON: append .json. Opt-out: how or hello@youraitools.co.