Find and log GDPR request evidence with Groq and Data Tables

Quick overview This workflow handles GDPR access or erasure requests by taking an email identifier, searching multiple connected systems (demo n8n Data Tables by default), recording per-system evidence, and generating a Groq-written plain-English summary plus a case register entry with a response deadline. How it works 1. Receives a GDPR request either from another n8n workflow input or from a built-in form with a subject email and request type (Access or Erasure). 2. Applies a policy guard (including a minimum identifier length) and refuses to search if the identifier is too short to safely match. 3. Searches three demo systems stored as n8n Data Tables (CRM contacts, support tickets, and a mailing list) while continuing even if a system errors. 4. Compiles per-system results, including whether each system answered, failed, or was not searched, and records an evidence row per system in an n8n Data Table. 5. Calculates the overall verdict (DATAFOUND, NODATAFOUND, INCOMPLETE, or NOTSEARCHED) and a due date based on a 30-day response window. 6. Sends the verdict and findings to Groq to produce a constrained one-paragraph summary that cannot override the code-decided outcome. 7. Stores the case in a register Data Table using a hash of the identifier, then either shows a result page for form submissions or returns the case details to the calling workflow. Setup 1. Add a Groq API credential and select it in the Groq Chat Model node. 2. Create and select two n8n Data Tables for logging: one for per-system evidence (caseid, searchedat, systemname, status, recordsfound, detail) and one for the case register (caseid, subjecthash, requesttype, receivedat, dueat, verdict, systemsanswered, systemsfailed, recordsfound, summary, note). 3. Select or create the three demo Data Tables used as source systems (CRM contacts, support tickets, mailing list), or replace those searches with your real systems while ensuring they provide an email field (and optionally a recordref). 4. If you call this as a sub-workflow, pass subjectidentifier and requesttype into the workflow inputs and consume the returned caseid, verdict, dueat, and findings. Requirements - A free Groq account and API key. Groq is the AI service that writes the short plain-English summary at the end. The free tier is enough, and the AI is not what decides the result. - n8n Data Tables, which come built into n8n. You need two: one holds a row for every system searched, the other holds one row per request. No external database or spreadsheet is needed. - Somewhere to search. It ships pointing at three demo tables so you can try it in about two minutes, then you point each search at a real place you keep customer data, such as your CRM, helpdesk or mailing list. Customization - Add or remove the systems it searches. Each place you keep customer data is one search step. Copy a step, point it at your system, then add its name to the short list inside Collect Findings Per System so it gets its own evidence row. - Change the reply deadline and the minimum identifier length, both in Set GDPR Policy. The deadline is one month by default, which is what the law allows. Shorten it if your own policy is stricter. - Decide what happens after the answer. The workflow only reports, so connect the result to an email, a Slack message, a ticket, or a person's queue. Route INCOMPLETE to a human, because that one means the search did not finish. Additional info In plain terms: someone writes in and says "tell me what you hold about me" or "delete everything you have on me". By law you have about a month to answer, and you are expected to have looked everywhere, not just in the first place you thought of. This workflow does the looking and writes down what it found. You give it an email address. It searches each system you have connected, one at a time, and writes a separate line for each: which system, did it answer, how many records it held, and their reference numbers. That per-system line is the bit a