Data Minimization Auditor
Data Minimization Auditor asks what each field is for; the fields with no answer are the finding. Runs entirely in your browser with no upload and no sign-up.
🔒 This tool runs entirely in your browser. Your files are never uploaded to a server.
Security & Privacy
Data Minimization Auditor
Frontend preview — no upload or external service.
Field audit
Of 11 fields, 4 have no stated use for account creation. Date of birth is flagged as needing a specific justification, and 2 fields duplicate information already captured.
How the Data Minimization Auditor works
- List every field the form or table collects, including ones added years ago that nobody questions.
- State the single purpose the collection serves — if you need two purposes, run it twice.
- Remove the fields with no use. Every one you delete is one you no longer have to secure, retain, or disclose in a subject access request.
FAQ
What is data minimisation?
The principle that you collect only what is adequate, relevant and necessary for a stated purpose. It appears in GDPR and in most modern privacy regimes, and it is also plain good engineering.
Why does collecting less help?
Because data you never collected cannot leak, cannot be subpoenaed, does not need retention rules, and does not appear in a subject access request. Deleting a field removes work in several directions at once.
Is this legal advice?
No. It is a structured prompt to review fields against a purpose. Which fields are lawful to collect depends on your jurisdiction, your sector and your basis for processing, and needs qualified advice.
How we compare
| Feature | Online Tool Store | A command-line tool | A paid audit service |
|---|---|---|---|
| Field-by-field review | ✓ | ✗ | Consultant |
| Flags unused fields | ✓ | ✗ | ✗ |
| Nothing uploaded | ✓ | ✗ | ✗ |
| No subscription | ✓ | ✗ | ✗ |
Data Minimization Auditor asks what each field is for; the fields with no answer are the finding.