Integration · Company data

Connect Claude & ChatGPT to Concord

Ask your AI which privacy requests are still open, what a person consented to, or to log a new deletion request in Concord. It can search and update privacy requests, read consent events and trackers, and keep your data systems and processing activities current. Privacy work gets done without clicking through every project.

Connect Concord free

Free plan, no credit card. Takes about a minute.

Try asking

“Which privacy requests are still open?”
The AI searches privacy requests across your projects by status and lists who asked, what they asked for and when.
“Log a delete request from [email protected] on our main website.”
It finds the project and creates a privacy request of type delete with her email and the details you give.
“Mark request 4821 as resolved and add a note that the data was removed.”
It updates the privacy request with status resolved, the resolution text and your note.

What your AI can do

Privacy requests

Search, log and update data subject requests across projects, and read the activity history of each request.

Consent and trackers

Search and record consent events, list consent types, regions and domains, and look up the cookies and trackers of a project.

Data map and records

Search, create and update data systems and processing activities, list data flows and read RoPA reports.

“What consent did users give on shop.example.com last week?”
It searches consent events for that domain and date range and shows consent states and actions.
“Add Mailchimp to our data map with a 24-month retention.”
It creates a data system with name, status, description and retention. You can link it to projects later.
“Which cookies are set up for our website project?”
It lists the trackers configured for the project, with name, category, domain and company.

108 tools for Concord

These tools are switched on when you connect. You can switch any of them off, or require your approval before it runs.

create_companyChanges dataCreate a new company. Required: name or primary domain. Search companies first to avoid duplicates. API summary: Create organization.
create_company_api_keyChanges dataCreate a new api key for a company. Required: name. Search api keys first to avoid duplicates. API summary: Create API key.
create_company_data_system_attributeChanges dataCreate a new data system attribute for a company. Required: attribute name, name or status. Search data system attributes first to avoid duplicates. API summary: Create data system attribute.
create_company_data_system_connectionChanges dataCreate a new data system connection for a company. Required: data system1, data system2 or direction. API summary: Create a data flow between two data systems.
create_company_messageChanges dataCreate a new message for a company. Search messages first to avoid duplicates. API summary: Create send from email.
create_company_projectChanges dataCreate a new project for a company. Required: name. Search projects first to avoid duplicates. API summary: Create new project.
create_company_public_keyChanges dataCreate a new public key for a company. Required: kid or jwk. API summary: Add public key.
create_company_ropa_reportChanges dataCreate a new ropa report for a company. Required: name. Search ropa reports first to avoid duplicates. API summary: Create ROPA report.
create_company_userChanges dataCreate a new user for a company. Required: email. API summary: Create user.
create_compliance_request_documentChanges dataCreate a new document for a compliance request. API summary: Upload a compliance request file.
create_compliance_request_trust_center_exportChanges dataCreate a new trust center export for a compliance request. Required: trust center id. API summary: Generate + attach a trust-center subscriber export for a VIEW DSAR task.
create_data_systemChanges dataAdd a data system to the data map. Required: `name` and `status`; optionally description, retention, data categories, data subjects and linked projects.
create_privacy_requestChanges dataLog a new privacy request in a project. Required: `project_id` and `request` (view, change, delete or do_not_sell); add the person's `user_email`, name and `request_details`.
create_processing_activityChanges dataCreate a processing activity. Required: `name` and `status`; optionally description, legal basis and linked data systems.
create_project_compliance_scanChanges dataCreate a new compliance scan for a project. Required: target. API summary: Create compliance scan.
create_project_consent_typeChanges dataCreate a new consent type for a project. Required: category, subcategory or label. Search consent types first to avoid duplicates. API summary: Create consent type.
create_project_domainChanges dataCreate a new domain for a project. Required: domain. Search domains first to avoid duplicates.
create_project_gcm_scanChanges dataCreate a new gcm scan for a project. API summary: Create gcm scan.
create_project_regionChanges dataCreate a new region for a project. Required: name, regions or settings. Search regions first to avoid duplicates. API summary: Create region.
create_project_trackerChanges dataCreate a new tracker for a project. Search trackers first to avoid duplicates. API summary: Create new tracker(s).
create_project_tracker_scanChanges dataCreate a new tracker scan for a project. API summary: Create new tracker scan.
create_region_languageChanges dataCreate a new language for a region. Search languages first to avoid duplicates. API summary: Enables or disables the multi-language support for the given organization, project, and region IDs.
create_ropa_report_rowChanges dataCreate a new row for a ropa report. Required: processing activity id. API summary: Add a processing activity to a ROPA report.
delete_companyDeletesPermanently delete a company by company id. Destructive action; may require approval. API summary: Delete organization by ID.
delete_company_api_keyDeletesPermanently delete a api key by api key. Destructive action; may require approval. API summary: Delete API key by ID.
delete_company_data_systemDeletesPermanently delete a data system by data system id. Destructive action; may require approval. API summary: Delete data system.
delete_company_data_system_attributeDeletesPermanently delete a data system attribute by data system attribute id. Destructive action; may require approval. API summary: Delete data system attribute.
delete_company_data_system_connectionDeletesPermanently delete a data system connection by data system connection id. Destructive action; may require approval. API summary: Delete a data flow.
delete_company_messageDeletesPermanently delete a message by message id. Destructive action; may require approval. API summary: Delete send from email.
delete_company_projectDeletesPermanently delete a project by project id. Destructive action; may require approval. API summary: Delete project.
delete_company_public_keyDeletesPermanently delete a public key by kid. Destructive action; may require approval. API summary: Delete public key.
delete_company_ropa_reportDeletesPermanently delete a ropa report by report id. Destructive action; may require approval. API summary: Delete ROPA Report.
delete_company_taskDeletesPermanently delete a task by task id. Destructive action; may require approval. API summary: Processing activity.
delete_company_userDeletesPermanently delete a user by user id. Destructive action; may require approval. API summary: Delete user.
delete_compliance_request_documentDeletesPermanently delete a document by document name. Destructive action; may require approval. API summary: Delete a compliance request file.
delete_project_consent_typeDeletesPermanently delete a consent type by consent type id. Destructive action; may require approval. API summary: Delete consent type.
delete_project_domainDeletesPermanently delete a domain by domain id. Destructive action; may require approval.
delete_project_regionDeletesPermanently delete a region by region id. Destructive action; may require approval. API summary: Delete region.
delete_project_trackerDeletesPermanently delete a tracker by tracker id. Destructive action; may require approval. API summary: Delete tracker by ID.
delete_project_tracker_scanDeletesPermanently delete a tracker scan by tracker scan id. Destructive action; may require approval. API summary: Delete tracker scan result by ID.
delete_project_tracker_scansMoves moneyPermanently delete a tracker scan by project id. Financial or irreversible action; may require approval. API summary: Delete one or more tracker scan results.
delete_project_trackersMoves moneyPermanently delete a tracker by project id. Financial or irreversible action; may require approval. API summary: Delete one or more trackers.
delete_ropa_report_rowDeletesPermanently delete a row by row id. Destructive action; may require approval. API summary: Remove a processing activity from a ROPA report.
export_consent_eventsChanges dataExport consent events.
export_ropa_reportsExport ropa reports. API summary: Export a ROPA report.
get_mapped_global_processing_activitiesSearch tasks for a company by id, name, status, sort or order. Use this to find existing tasks before creating a new task. Results are paginated. API summary: Get mapped global processing activities.
get_organizationGet one organization's details by `company_id` (the organization ID).
get_projectGet one project's details and settings by `project_id`.
get_project_regionGet one region for a project by region id. API summary: Get region.
get_region_languageGet one language for a region by language id. API summary: Get language.
get_ropa_reportGet one RoPA report by `report_id`.
list_company_mapped_global_data_systemsList mapped global data systems for a company. API summary: Get mapped global data systems.
list_company_public_keysList public keys for a company. API summary: Get public keys.
list_compliance_request_connector_resultsList connector results for a compliance request.
list_consent_typesList the consent types (e.g. newsletter, terms) defined in a project by `project_id`.
list_data_flowsList data flows between data systems, optionally for one `data_system_id`.
list_organizationsList the Concord organizations the API key can reach, with their IDs. Filter by `name`, `primary_domain` or `status`.
list_privacy_request_eventsList the activity history of privacy requests, optionally for one `compliance_request_id` or a date range.
list_project_brandingsList brandings for a project. API summary: Get project branding.
list_project_compliance_requests_eventsList compliance requests events for a project. Optional filters: account id, compliance request id, compliance request event id, end date, order or start date. Results are paginated. API summary: Get project level compliance requests events.
list_project_consent_eventsList consent events for a project. Optional filters: start date, end date, category, subcategory, label or consent state. Results are paginated. API summary: Get the consent events for a project.
list_project_domainsList the website domains registered in a project by `project_id`.
list_project_gcm_scan_resultsList gcm scan results for a project. API summary: Get GCM scan results.
list_project_regionsList a project's consent regions (e.g. EU, California) and their consent settings by `project_id`.
list_projectsList the organization's projects (websites/apps covered by Concord). Filter by `name` or `status`; use this to find a `project_id` for other tools.
list_region_tcf_stack_selectionsList tcf stack selections for a region. API summary: Get TCF stack selections for region.
list_region_tcf_vendor_selectionsList tcf vendor selections for a region. Optional filters: framework. API summary: Get TCF vendor selections.
list_resolvedsList resolveds. API summary: Get resolved branding.
list_ropa_reportsList Records of Processing Activities (RoPA) reports. Filter by `name` or `status`.
list_usersList the users in the organization.
record_consent_eventsChanges dataRecord one or more consent events in a project. Pass `project_id` and `items`, each with `consentState` (implied, viewed, accepted, declined) and `consentAction` (implied or user_click), plus email or user ID.
search_company_api_keysSearch api keys for a company by name, project name, role, project ids, sort or order. Use this to find existing api keys before creating a new api key. Results are paginated. API summary: Get API keys.
search_company_data_system_attributesSearch data system attributes for a company by id, name, p ii type, status, sort or order. Use this to find existing data system attributes before creating a new data system attribute. Results are paginated. API summary: Get data system attributes.
search_company_messagesSearch messages for a company by name, email, status, sort or order. Use this to find existing messages before creating a new message. Results are paginated. API summary: Get send from emails.
search_consent_eventsSearch recorded consent events across projects. Filter by `consent_state`, `consent_action`, `category`, `domain`, `start_date`/`end_date` or `project_ids`.
search_data_systemsSearch the organization's data map of data systems (tools and databases holding personal data). Filter by `name` or `status`.
search_privacy_requestsSearch privacy (data subject) requests across all projects. Filter by `user_email`, `status`, `request` type, `text`, `start_date`/`end_date` or `project_ids`.
search_processing_activitiesSearch the organization's processing activities (records of processing). Filter by `name` or `status`.
search_project_compliance_requestsSearch compliance requests for a project by concord id, compliance request id, domain, end date, geography or notes. Use this to find existing compliance requests before creating a new compliance request. Results are paginated. API summary: Get project level compliance requests.
search_project_suppliersSearch suppliers for a project by vendor ids, framework, search or purposes. Use this to find existing suppliers before creating a new supplier. Results are paginated. API summary: Get TCF vendors for admin management.
search_project_tcf_purposesSearch tcf purposes for a project by type, ids or search. Use this to find existing tcf purposes before creating a new tcf purpose. API summary: Get TCF purposes from GVL.
search_project_tcf_stacksSearch tcf stacks for a project by stack ids or search. Use this to find existing tcf stacks before creating a new tcf stack. Results are paginated. API summary: Get TCF stacks for admin management.
search_project_tracker_scan_resultsSearch tracker scan results for a project by id, category, company, pattern, domain or date detected. Use this to find existing tracker scan results before creating a new tracker scan result. Results are paginated. API summary: Get tracker scan results.
search_region_languagesSearch languages for a region by name, sort or order. Use this to find existing languages before creating a new language. Results are paginated. API summary: Get languages.
search_trackersSearch the cookies and trackers configured for a project by `project_id`. Filter by `name`, `category`, `domain` or `company`.
submit_ropa_reportVisible to othersFinalize a ropa report (report id). Has effects visible outside this system. API summary: Finalize ROPA report.
submit_user_inviteVisible to othersResend a user (user id). Has effects visible outside this system. API summary: Resend organization invite.
update_companyChanges dataUpdate an existing company identified by company id. Only the fields you pass are changed. API summary: Update organization by ID.
update_company_api_keyChanges dataUpdate an existing api key identified by api key. Only the fields you pass are changed. API summary: Update API key.
update_company_data_system_attributeChanges dataUpdate an existing data system attribute identified by data system attribute id. Only the fields you pass are changed. API summary: Update data system attribute.
update_company_data_system_connectionChanges dataUpdate an existing data system connection identified by data system connection id. Only the fields you pass are changed. API summary: Update a data flow.
update_company_messageVisible to othersUpdate an existing message identified by message id. Only the fields you pass are changed. Has effects visible outside this system. API summary: Update send from email.
update_company_ropa_reportChanges dataUpdate an existing ropa report identified by report id. Only the fields you pass are changed. API summary: Update ROPA report summary.
update_company_userChanges dataUpdate an existing user identified by user id. Only the fields you pass are changed. API summary: Update user.
update_data_systemChanges dataUpdate a data system by `data_system_id`, e.g. its name, status, description, retention or data categories. Only the fields you pass change.
update_privacy_requestChanges dataUpdate a privacy request by `project_id` and `compliance_request_id`: set `status` (acknowledged or resolved), `resolution_status`, `resolution` text or `notes`.
update_processing_activityChanges dataUpdate a processing activity by `task_id`, e.g. name, status, description, legal basis or data systems.
update_projectChanges dataUpdate a project's `name`, `status`, `contact_emails` or linked data systems by `project_id`. Only the fields you pass change.
update_project_brandingsVisible to othersUpdate an existing branding identified by project id. Only the fields you pass are changed. Has effects visible outside this system. API summary: Update project branding.
update_project_consent_typeChanges dataUpdate an existing consent type identified by consent type id. Only the fields you pass are changed. API summary: Update consent type.
update_project_domainChanges dataUpdate an existing domain identified by domain id. Only the fields you pass are changed. API summary: Update domain.
update_project_regionChanges dataUpdate an existing region identified by region id. Only the fields you pass are changed. API summary: Update region.
update_project_trackerChanges dataUpdate an existing tracker identified by tracker id. Only the fields you pass are changed. API summary: Update tracker.
update_project_tracker_scanChanges dataUpdate an existing tracker scan identified by tracker scan id. Only the fields you pass are changed. API summary: Update tracker scan.
update_region_languageChanges dataUpdate an existing language identified by language id. Only the fields you pass are changed. API summary: Update language.
update_region_tcf_stack_selectionsVisible to othersUpdate an existing tcf stack selection identified by region id. Only the fields you pass are changed. Has effects visible outside this system. API summary: Update TCF stack selections for region.
update_region_tcf_vendor_selectionsVisible to othersUpdate an existing tcf vendor selection identified by region id. Only the fields you pass are changed. Has effects visible outside this system. API summary: Update TCF vendor selections.
update_ropa_report_rowChanges dataUpdate an existing row identified by row id. Only the fields you pass are changed. API summary: Update a ROPA report row.

Set up in three steps

1
Pick the app
Create a free HeyMyApps account and choose Concord from the app list.
2
Paste your key
Paste your Concord API key and your organization ID. In Concord go to Global Settings → API Keys, click Add API Key, give it a name and pick the Admin role (full access) or Limited (read-only plus adding privacy requests). The 'List organizations' tool shows the organizations your key can reach, with their IDs.
3
Add the link to your AI
You get a personal MCP link. Add it to Claude, ChatGPT or Cursor:
1. Click your name, then Settings › Connectors › Add custom connector.
2. Paste your link as the Remote MCP server URL.
3. Switch it on from the + menu in a chat.

Questions

What can the AI do in Concord?

The AI can read your organization, projects, privacy requests and their history, consent events and consent types, trackers, domains, regions, data systems, data flows, processing activities, RoPA reports and users. It can log and update privacy requests, record consent events, and create and update data systems and processing activities.

Does the AI see my Concord credentials?

No. Your Concord API key is encrypted at rest and never shown to the AI. After you save it, it is not shown again, not even to you. The AI only sees the results of the tools it calls.

Can I control what the AI is allowed to do?

Yes. You choose which tools are switched on, so you can start with lookups only. Changes such as resolving a privacy request or recording consent can require your approval before they run. Every tool call is logged.

Does it work with ChatGPT?

Yes. In ChatGPT go to Settings › Apps & Connectors › Advanced and turn on Developer mode, then add your HeyMyApps link. Developer mode needs a paid ChatGPT plan: Plus, Pro, Business or Enterprise. The same link also works in Claude (Settings › Connectors › Add custom connector), Cursor and other MCP clients.

What does it cost?

HeyMyApps has a free plan with no credit card required. Paid plans bill per completed task. You also need your own Concord account.

Should I use an Admin or a Limited API key?

Concord lets you choose the role when you create the key. Admin gives full access. Limited is read-only plus adding privacy requests, so updates to requests, data systems or processing activities will be refused. Pick Limited if you only want the AI to look things up and log new requests.