Fides, an open source privacy engineering platform for data mapping, consent management and automated fulfilment of data subject access and erasure requests.
Fides is an open source privacy engineering platform, built by Ethyca, that acts as the system of record for how personal data moves through an organisation. Teams describe their systems and datasets against a shared privacy taxonomy, and Fides turns that description into working machinery: it maps and inventories the personal data held, stores and enforces the consent and communication preferences customers have given, and automates data subject access and erasure requests by executing them against the systems the data actually lives in. Everything is available through a documented REST API as well as a web interface, so privacy controls can be wired into the software delivery process rather than bolted on afterwards.
cloudimg ships Fides with every supporting service already running on the same instance: the web application, a background worker that executes privacy requests, a bundled database and a cache and task broker, all managed by systemd behind a reverse proxy. Because Fides holds several distinct secrets and the upstream project publishes a working sample value for nearly all of them, security is enforced from first boot: every instance generates its own administrator password, root API client id and secret, encryption key, token signing secret, database password, cache password and TLS certificate, and each published default is actively rejected. The database and cache listen only on the loopback interface and are never exposed on a public port. Every image is paired with a step by step deployment guide and backed by 24/7 support.
Real screenshots taken while testing this image against its deployment guide.