{
  "name": "GDPR Data Access Request with Verifiable Decision Receipts",
  "nodes": [
    {
      "parameters": {
        "httpMethod": "POST",
        "path": "dsar",
        "options": {},
        "responseMode": "responseNode"
      },
      "id": "87169990-3d58-4e37-ae97-e292068d3670",
      "name": "GDPR Data Access Request",
      "type": "n8n-nodes-base.webhook",
      "typeVersion": 2.1,
      "position": [
        0,
        300
      ],
      "webhookId": "8b090fe9-931b-4ba3-b31b-81c4439056c3"
    },
    {
      "parameters": {
        "modelId": {
          "__rl": true,
          "mode": "list",
          "value": "gpt-4o",
          "cachedResultName": "GPT-4O"
        },
        "messages": {
          "values": [
            {
              "role": "system",
              "content": "=You are a GDPR DSAR-handling AI. Return JSON: {\"decision\":\"FULFILL|PARTIAL|REJECT\",\"scope\":\"...\",\"reason\":\"...\"}."
            },
            {
              "content": "=Return JSON only.\n\nInput:\n{{ JSON.stringify($json.body) }}"
            }
          ]
        },
        "jsonOutput": true,
        "options": {}
      },
      "id": "cad6fcb9-22e6-4a21-9eee-6bf6fd93efe6",
      "name": "AI Decision",
      "type": "@n8n/n8n-nodes-langchain.openAi",
      "typeVersion": 2.1,
      "position": [
        220,
        300
      ],
      "credentials": {
        "openAiApi": {
          "id": "REPLACE_OPENAI_CRED_ID",
          "name": "OpenAi account"
        }
      }
    },
    {
      "parameters": {
        "operation": "generateReceipt",
        "agentName": "DSARAgent",
        "workflowName": "={{ $workflow.name }}",
        "action": "={{ 'AI decision: ' + ($json.message.content.decision || $json.message.content.recommendation || 'completed') }}",
        "decision": "={{ JSON.stringify($json.message.content) }}",
        "additionalFields": {
          "modelProvider": "openai",
          "modelUsed": "gpt-4o",
          "decisionType": "dsar_decision",
          "riskLevel": "high",
          "humanReview": true,
          "policies": "gdpr-art15, data-retention",
          "permissions": "dsar.process",
          "tags": "privacy, gdpr, governance"
        }
      },
      "id": "2a12b226-0b18-4ae3-a0b8-a1d900b2d39e",
      "name": "Signatrust: Receipt",
      "type": "n8n-nodes-signatrust.signatrust",
      "typeVersion": 1,
      "position": [
        440,
        300
      ],
      "credentials": {
        "signatrustApi": {
          "id": "REPLACE_SIGNATRUST_CRED_ID",
          "name": "Signatrust API account"
        }
      }
    },
    {
      "parameters": {
        "respondWith": "json",
        "responseBody": "={{ { status:\"OK\", receipt_id:$json.id, decision:$('AI Decision').item.json.message.content } }}",
        "options": {}
      },
      "id": "a0bd6118-fb99-4dc0-bc13-f6e50baec520",
      "name": "Respond",
      "type": "n8n-nodes-base.respondToWebhook",
      "typeVersion": 1.1,
      "position": [
        660,
        300
      ]
    },
    {
      "parameters": {
        "content": "## GDPR Data Access Request with Verifiable Decision Receipts\n**Why Signatrust?** Every AI decision here becomes a tamper-evident, Ed25519-signed receipt — verifiable for audits and disputes.",
        "height": 170,
        "width": 420,
        "color": 5
      },
      "id": "9601bc4a-4d75-4bc7-89e3-3ee8be1d9f06",
      "name": "Sticky Note e85e76",
      "type": "n8n-nodes-base.stickyNote",
      "typeVersion": 1,
      "position": [
        -40,
        40
      ]
    }
  ],
  "connections": {
    "GDPR Data Access Request": {
      "main": [
        [
          {
            "node": "AI Decision",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "AI Decision": {
      "main": [
        [
          {
            "node": "Signatrust: Receipt",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Signatrust: Receipt": {
      "main": [
        [
          {
            "node": "Respond",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  },
  "active": false,
  "pinData": {},
  "settings": {
    "executionOrder": "v1"
  },
  "tags": [
    {
      "name": "GDPR Data Access Request — privacy"
    },
    {
      "name": "GDPR Data Access Request — gdpr"
    },
    {
      "name": "GDPR Data Access Request — governance"
    },
    {
      "name": "Signatrust (19)"
    }
  ],
  "meta": {
    "templateCredsSetupCompleted": false
  },
  "versionId": "85e10d52-0544-4a67-97db-942e83b9dbf7"
}