# Privacy Solution Scorecard > Evaluate and compare privacy solution vendors with a weighted scorecard across 12 criteria. Use when selecting privacy management software, comparing data protection tools, evaluating consent management platforms, assessing privacy vendor proposals, or building a privacy tool business case. - Skill: `dvcrn/privacy-solution-scorecard` (Agent Skill, multi-file: 2 files) - Install (CLI): `npx skillmds@latest add dvcrn/privacy-solution-scorecard` - Raw SKILL.md: https://api.skillmd.com/api/skills/dvcrn/privacy-solution-scorecard/raw - Safety review: pending (external: skill-scanner PASS, skillspector PASS) - Works with: Claude Code, Claude.ai, OpenAI Codex - Category: Coding & Dev Tools - Author: dvcrn (https://skillmd.com/u/dvcrn) - Updated: 2026-09-08 - Page: https://skillmd.com/skills/dvcrn/privacy-solution-scorecard --- # Privacy Solution Scorecard 📊🏆 Evaluate and compare privacy management solution vendors using a comprehensive weighted scorecard. Score vendors across 12 criteria covering functionality, architecture, automation, compliance, cost, and vendor stability. Returns detailed scorecards, side-by-side comparison matrix, recommendations, and executive summary. **Built by a CISSP/CISM certified security professional at [ToolWeb.in](https://toolweb.in)** ## When to Use - User asks to evaluate or compare privacy solutions/vendors - User needs help selecting a consent management platform - User wants to score privacy tools like OneTrust, BigID, TrustArc, Securiti, etc. - User mentions privacy solution RFP, vendor selection, or tool comparison - User needs a business case for a privacy management platform - User asks about privacy tool features, pricing, or deployment options ## Prerequisites - `TOOLWEB_API_KEY` — Get your API key from [portal.toolweb.in](https://portal.toolweb.in) - `curl` must be available on the system ## API Endpoint ``` POST https://portal.toolweb.in/apis/compliance/privacy-scorecard ``` ## 12 Evaluation Criteria | Key | Criteria | Category | Weight | |-----|----------|----------|--------| | functionality_coverage | Comprehensive Functionality | Core Capabilities | 1.0 | | modular_architecture | Modular Design & Flexibility | Core Capabilities | 0.9 | | deployment_options | Deployment Options | Core Capabilities | — | | transparency_communication | Transparency & Communication | Core Capabilities | — | | scalability | Scalability | Core Capabilities | — | | automation_efficiency | Automation & Efficiency | Core Capabilities | — | | future_readiness | Future Readiness | Core Capabilities | — | | regulatory_coverage | Regulatory Coverage | Compliance | — | | integration_ecosystem | Integration Ecosystem | Technical | — | | reporting_analytics | Reporting & Analytics | Technical | — | | vendor_stability | Vendor Stability | Vendor | — | | total_cost_ownership | Total Cost of Ownership | Financial | — | Each criterion is scored 1-5: - **5** = Exceptional / best-in-class - **4** = Strong with good capabilities - **3** = Adequate with basic features - **2** = Limited, requires workarounds - **1** = Minimal with significant gaps ## Workflow 1. **Gather inputs** from the user: **Organization context:** - `organization_name` — Organization name - `evaluator_name` — Person conducting the evaluation - `organization_size` — "Small (1-50 employees)", "Medium (51-500)", "Large (501-5000)", "Enterprise (5000+)" - `industry_sector` — e.g., "Financial Services & Banking", "Healthcare & Life Sciences", "Technology & Software", "Retail & E-commerce", "Manufacturing", "Telecommunications", "Government & Public Sector", "Education" - `budget_range` — e.g., "Under $25,000/year", "$25,000-$75,000/year", "$75,000-$150,000/year", "$150,000-$300,000/year", "Over $300,000/year" - `deployment_preference` — "Cloud", "On-Premise", or "Hybrid" - `primary_regulations` — List of applicable regulations: ["GDPR", "CCPA/CPRA", "DPDP Act (India)", "LGPD (Brazil)", "PIPEDA (Canada)"] - `priority_criteria` — Most important criteria keys from the 12 above (optional) **Vendor evaluations** — For each vendor being compared, gather: - `vendor_name` — Name of the vendor (e.g., "OneTrust", "BigID", "Securiti") - `scores` — Dictionary of criterion key to score (1-5) for each of the 12 criteria - `notes` — Optional notes per criterion 2. **Call the API**: ```bash curl -s -X POST "https://portal.toolweb.in/apis/compliance/privacy-scorecard" \ -H "Content-Type: application/json" \ -H "X-API-Key: $TOOLWEB_API_KEY" \ -d '{ "organization_name": "", "evaluator_name": "", "organization_size": "", "industry_sector": "", "budget_range": "", "deployment_preference": "", "primary_regulations": ["GDPR", "CCPA/CPRA"], "priority_criteria": ["functionality_coverage", "regulatory_coverage"], "vendors": [ { "vendor_name": "Vendor A", "scores": { "functionality_coverage": 4, "modular_architecture": 3, "deployment_options": 4, "transparency_communication": 3, "scalability": 4, "automation_efficiency": 3, "future_readiness": 4, "regulatory_coverage": 5, "integration_ecosystem": 3, "reporting_analytics": 4, "vendor_stability": 4, "total_cost_ownership": 3 } }, { "vendor_name": "Vendor B", "scores": { "functionality_coverage": 3, "modular_architecture": 4, "deployment_options": 3, "transparency_communication": 4, "scalability": 3, "automation_efficiency": 4, "future_readiness": 3, "regulatory_coverage": 4, "integration_ecosystem": 4, "reporting_analytics": 3, "vendor_stability": 3, "total_cost_ownership": 4 } } ], "include_recommendations": true, "include_comparison_matrix": true }' ``` 3. **Parse the response**. The API returns: - `scorecard_html` — Detailed vendor scorecards with weighted scores - `comparison_html` — Side-by-side comparison matrix - `recommendations_html` — Detailed recommendations - `executive_summary_html` — Board-level summary 4. **Present results** with the winning vendor, comparison highlights, and recommendations. ## Output Format ``` 📊 Privacy Solution Vendor Scorecard ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ Organization: [name] Industry: [sector] Budget: [range] Regulations: [list] 🏆 Top Ranked: [Vendor Name] — [weighted score] 📋 Vendor Comparison: [Vendor A]: [total score] — Strongest in [top criteria] [Vendor B]: [total score] — Strongest in [top criteria] 📊 Head-to-Head by Category: Core Capabilities: [Vendor A] vs [Vendor B] Compliance: [Vendor A] vs [Vendor B] Technical: [Vendor A] vs [Vendor B] Financial: [Vendor A] vs [Vendor B] 🎯 Recommendation: [Summary recommendation with rationale] 📎 Full report powered by ToolWeb.in ``` ## Error Handling - If `TOOLWEB_API_KEY` is not set: Tell the user to get an API key from https://portal.toolweb.in - If the API returns 401: API key is invalid or expired - If the API returns 422: Check vendor scores format — each must be 1-5 integer - If the API returns 429: Rate limit exceeded — wait and retry after 60 seconds ## Example Interaction **User:** "Help me compare OneTrust and Securiti for our healthcare company" **Agent flow:** 1. Ask: "I'll create a vendor scorecard. A few questions: - What's your organization size and privacy budget? - Which regulations matter most (HIPAA, GDPR)? - How would you score each vendor on a 1-5 scale for areas like functionality, automation, regulatory coverage?" 2. User provides scores or descriptions (agent maps to 1-5) 3. Call API with vendor evaluations 4. Present winner, comparison matrix, and recommendation ## Pricing - API access via portal.toolweb.in subscription plans - Free trial: 10 API calls/day, 50 API calls/month to test the skill - Developer: $39/month — 20 calls/day and 500 calls/month - Professional: $99/month — 200 calls/day, 5000 calls/month - Enterprise: $299/month — 100K calls/day, 1M calls/month ## About Created by **ToolWeb.in** — a security-focused MicroSaaS platform with 200+ security APIs, built by a CISSP & CISM certified professional. Trusted by security teams in USA, UK, and Europe and we have platforms for "Pay-per-run", "API Gateway", "MCP Server", "OpenClaw", "RapidAPI" for execution and YouTube channel for demos. - 🌐 Toolweb Platform: https://toolweb.in - 🔌 API Hub (Kong): https://portal.toolweb.in - 🎡 MCP Server: https://hub.toolweb.in - 🦞 OpenClaw Skills: https://toolweb.in/openclaw/ - 🛒 RapidAPI: https://rapidapi.com/user/mkrishna477 - 📺 YouTube demos: https://youtube.com/@toolweb-009 ## Related Skills - **GDPR Compliance Tracker** — GDPR readiness assessment - **DPDP Act Compliance** — India privacy compliance - **Data Privacy Checklist** — 63-control privacy assessment - **ISO Compliance Gap Analysis** — ISO 27701 privacy management - **Data Breach Impact Calculator** — Breach cost estimation ## Tips - Compare at least 2-3 vendors for a meaningful scorecard - Adjust priority_criteria to weight what matters most to your org - Use the scoring guide (available via /api/criteria) for consistent scoring - Healthcare orgs should prioritize regulatory_coverage and functionality_coverage - Use the executive summary for procurement committee presentations