slug: osano provider: Osano generated_by: planning/capability-mapping/scripts/classify_capabilities.py model: claude-opus-5 frame: - Software & Technology min_confidence: 0.7 capability_model: source: https://github.com/vincentmakes/turbo-ea-capabilities license: CC-BY-4.0 attribution: Turbo EA Capabilities by Vincent Verdet — Turbo EA, https://github.com/vincentmakes/turbo-ea-capabilities, CC BY 4.0 notice: NOTICE edge_count: 8 edges: - tag: DSAR spec_file: osano-dsar-api-openapi.yml capability_id: BC-130.50 capability_id_l1: BC-130 capability_name: Privacy & Data Protection Management confidence: 0.95 evidence: GET /v1/subject-rights/requests getDsars List Subject Rights Requests; schemas ApplicableLaw, Jurisdiction reason: The surface manages data subject rights requests (DSARs) with applicable law and jurisdiction, exactly the data-subject-rights element of privacy and data protection management. - tag: Consents spec_file: osano-consents-api-openapi.yml capability_id: BC-130.50 capability_id_l1: BC-130 capability_name: Privacy & Data Protection Management confidence: 0.92 evidence: POST /v2/consents postV2Consents Create consents; GET /v2/consents/check/{subjectId} reason: Operations record and check data-subject consent records (including Global Privacy Control), which is core consent management under privacy and data protection compliance. - tag: cmp spec_file: osano-cmp-api-openapi.yml capability_id: BC-130.50 capability_id_l1: BC-130 capability_name: Privacy & Data Protection Management confidence: 0.9 evidence: GET /v1/cookie-consent/configs getConfigs List Cookie Consent Configurations; GET /v1/cookie-consent/audit-log reason: Cookie consent management platform configuration and audit log directly realise privacy/data protection compliance for website consent. - tag: dsarActionItems spec_file: osano-dsaractionitems-api-openapi.yml capability_id: BC-130.50 capability_id_l1: BC-130 capability_name: Privacy & Data Protection Management confidence: 0.9 evidence: GET /v1/subject-rights/action-items getDsarActionItems List Subject Rights Action Items reason: Tracks and fulfils work items generated by data subject rights requests, part of privacy and data protection management. - tag: cmpRules spec_file: osano-cmprules-api-openapi.yml capability_id: BC-130.50 capability_id_l1: BC-130 capability_name: Privacy & Data Protection Management confidence: 0.85 evidence: POST /v1/cookie-consent/rules createRules Create New Cookie Consent Rules reason: Defines cookie consent rules governing tracking behaviour, part of consent/privacy compliance administration. - tag: subjectRightsPortal spec_file: osano-subjectrightsportal-api-openapi.yml capability_id: BC-130.50 capability_id_l1: BC-130 capability_name: Privacy & Data Protection Management confidence: 0.82 evidence: GET /v1/subject-rights/requests/{requestId}/portal-messages getPortalMessages reason: Messaging with data subjects within their rights-request portal; a communication surface specific to DSAR handling under privacy compliance. - tag: Consent Profiles spec_file: osano-consent-profiles-api-openapi.yml capability_id: BC-130.50 capability_id_l1: BC-130 capability_name: Privacy & Data Protection Management confidence: 0.8 evidence: GET /v2/consent-profiles/{hashedSubjectId} Get consent profiles by hashed subject id reason: Retrieval of a data subject's consent profile is core consent management, which sits under Privacy & Data Protection Management. - tag: Collections spec_file: osano-collections-api-openapi.yml capability_id: BC-130.50 capability_id_l1: BC-130 capability_name: Privacy & Data Protection Management confidence: 0.7 evidence: GET /v2/collections/{collectionId} Retrieves a collection of privacy protocols reason: Unified Consent Core collections return privacy protocols per jurisdiction — part of consent management under privacy & data protection. Thin surface (2 read ops) so moderate confidence.