Kubernetes Network Policy Generator

SKILL.md

---
name: privacy-solution-scorecard
description: Evaluate and compare privacy solution vendors with a weighted scorecard across 12 criteria. Use when selecting privacy management software, comparing data protection tools, evaluating consent management platforms, assessing privacy vendor proposals, or building a privacy tool business case.
version: 1.0.0
homepage: https://portal.toolweb.in
metadata:
  openclaw:
    emoji: "📊"
    requires:
      env:
        - TOOLWEB_API_KEY
      bins:
        - curl
    primaryEnv: TOOLWEB_API_KEY
    os:
      - linux
      - darwin
      - win32
    category: security
---

# Privacy Solution Scorecard 📊🏆

Evaluate and compare privacy management solution vendors using a comprehensive weighted scorecard. Score vendors across 12 criteria covering functionality, architecture, automation, compliance, cost, and vendor stability. Returns detailed scorecards, side-by-side comparison matrix, recommendations, and executive summary.

**Built by a CISSP/CISM certified security professional at [ToolWeb.in](https://toolweb.in)**

## When to Use

- User asks to evaluate or compare privacy solutions/vendors
- User needs help selecting a consent management platform
- User wants to score privacy tools like OneTrust, BigID, TrustArc, Securiti, etc.
- User mentions privacy solution RFP, vendor selection, or tool comparison
- User needs a business case for a privacy management platform
- User asks about privacy tool features, pricing, or deployment options

## Prerequisites

- `TOOLWEB_API_KEY` — Get your API key from [portal.toolweb.in](https://portal.toolweb.in)
- `curl` must be available on the system

## API Endpoint

```
POST https://portal.toolweb.in/apis/compliance/privacy-scorecard
```

## 12 Evaluation Criteria

| Key | Criteria | Category | Weight |
|-----|----------|----------|--------|
| functionality_coverage | Comprehensive Functionality | Core Capabilities | 1.0 |
| modular_architecture | Modular Design & Flexibility | Core Capabilities | 0.9 |
| deployment_options | Deployment Options | Core Capabilities | — |
| transparency_communication | Transparency & Communication | Core Capabilities | — |
| scalability | Scalability | Core Capabilities | — |
| automation_efficiency | Automation & Efficiency | Core Capabilities | — |
| future_readiness | Future Readiness | Core Capabilities | — |
| regulatory_coverage | Regulatory Coverage | Compliance | — |
| integration_ecosystem | Integration Ecosystem | Technical | — |
| reporting_analytics | Reporting & Analytics | Technical | — |
| vendor_stability | Vendor Stability | Vendor | — |
| total_cost_ownership | Total Cost of Ownership | Financial | — |

Each criterion is scored 1-5:
- **5** = Exceptional / best-in-class
- **4** = Strong with good capabilities
- **3** = Adequate with basic features
- **2** = Limited, requires workarounds
- **1** = Minimal with significant gaps

## Workflow

1. **Gather inputs** from the user:

   **Organization context:**
   - `organization_name` — Organization name
   - `evaluator_name` — Person conducting the evaluation
   - `organization_size` — "Small (1-50 employees)", "Medium (51-500)", "Large (501-5000)", "Enterprise (5000+)"
   - `industry_sector` — e.g., "Financial Services & Banking", "Healthcare & Life Sciences", "Technology & Software", "Retail & E-commerce", "Manufacturing", "Telecommunications", "Government & Public Sector", "Education"
   - `budget_range` — e.g., "Under $25,000/year", "$25,000-$75,000/year", "$75,000-$150,000/year", "$150,000-$300,000/year", "Over $300,000/year"
   - `deployment_preference` — "Cloud", "On-Premise", or "Hybrid"
   - `primary_regulations` — List of applicable regulations: ["GDPR", "CCPA/CPRA", "DPDP Act (India)", "LGPD (Brazil)", "PIPEDA (Canada)"]
   - `priority_criteria` — Most important criteria keys from the 12 above (optional)

   **Vendor evaluations** — For each vendor being compared, gather:
   - `vendor_name` — Name of the vendor (e.g., "OneTrust", "BigID", "Securiti")
   - `scores` — Dictionary of criterion key to score (1-5) for each of the 12 criteria
   - `notes` — Optional notes per criterion

2. **Call the API**:

```bash
curl -s -X POST "https://portal.toolweb.in/apis/compliance/privacy-scorecard" \
  -H "Content-Type: application/json" \
  -H "X-API-Key: $TOOLWEB_API_KEY" \
  -d '{
    "organization_name": "<org>",
    "evaluator_name": "<name>",
    "organization_size": "<size>",
    "industry_sector": "<industry>",
    "budget_range": "<budget>",
    "deployment_preference": "<Cloud/On-Premise/Hybrid>",
    "primary_regulations": ["GDPR", "CCPA/CPRA"],
    "priority_criteria": ["functionality_coverage", "regulatory_coverage"],
    "vendors": [
      {
        "vendor_name": "Vendor A",
        "scores": {
          "functionality_coverage": 4,
          "modular_architecture": 3,
          "deployment_options": 4,
          "transparency_communication": 3,
          "scalability": 4,
          "automation_efficiency": 3,
          "future_readiness": 4,
          "regulatory_coverage": 5,
          "integration_ecosystem": 3,
          "reporting_analytics": 4,
          "vendor_stability": 4,
          "total_cost_ownership": 3
        }
      },
      {
        "vendor_name": "Vendor B",
        "scores": {
          "functionality_coverage": 3,
          "modular_architecture": 4,
          "deployment_options": 3,
          "transparency_communication": 4,
          "scalability": 3,
          "automation_efficiency": 4,
          "future_readiness": 3,
          "regulatory_coverage": 4,
          "integration_ecosystem": 4,
          "reporting_analytics": 3,
          "vendor_stability": 3,
          "total_cost_ownership": 4
        }
      }
    ],
    "include_recommendations": true,
    "include_comparison_matrix": true
  }'
```

3. **Parse the response**. The API returns:
   - `scorecard_html` — Detailed vendor scorecards with weighted scores
   - `comparison_html` — Side-by-side comparison matrix
   - `recommendations_html` — Detailed recommendations
   - `executive_summary_html` — Board-level summary

4. **Present results** with the winning vendor, comparison highlights, and recommendations.

## Output Format

```
📊 Privacy Solution Vendor Scorecard
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

Organization: [name]
Industry: [sector]
Budget: [range]
Regulations: [list]

🏆 Top Ranked: [Vendor Name] — [weighted score]

📋 Vendor Comparison:
  [Vendor A]: [total score] — Strongest in [top criteria]
  [Vendor B]: [total score] — Strongest in [top criteria]

📊 Head-to-Head by Category:
  Core Capabilities: [Vendor A] vs [Vendor B]
  Compliance: [Vendor A] vs [Vendor B]
  Technical: [Vendor A] vs [Vendor B]
  Financial: [Vendor A] vs [Vendor B]

🎯 Recommendation:
[Summary recommendation with rationale]

📎 Full report powered by ToolWeb.in
```

## Error Handling

- If `TOOLWEB_API_KEY` is not set: Tell the user to get an API key from https://portal.toolweb.in
- If the API returns 401: API key is invalid or expired
- If the API returns 422: Check vendor scores format — each must be 1-5 integer
- If the API returns 429: Rate limit exceeded — wait and retry after 60 seconds

## Example Interaction

**User:** "Help me compare OneTrust and Securiti for our healthcare company"

**Agent flow:**
1. Ask: "I'll create a vendor scorecard. A few questions:
   - What's your organization size and privacy budget?
   - Which regulations matter most (HIPAA, GDPR)?
   - How would you score each vendor on a 1-5 scale for areas like functionality, automation, regulatory coverage?"
2. User provides scores or descriptions (agent maps to 1-5)
3. Call API with vendor evaluations
4. Present winner, comparison matrix, and recommendation

## Pricing

- API access via portal.toolweb.in subscription plans
- Free trial: 5 API calls/day, 50 API calls/month to test the skill
- Developer: $39/month — 20 calls/day and 500 calls/month
- Professional: $99/month — 200 calls/day, 5000 calls/month
- Enterprise: $299/month — 100K calls/day, 1M calls/month

## About

Created by **ToolWeb.in** — a security-focused MicroSaaS platform with 200+ security APIs, built by a CISSP & CISM certified professional. Trusted by security teams in USA, UK, and Europe and we have platforms for "Pay-per-run", "API Gateway", "MCP Server", "OpenClaw", "RapidAPI" for execution and YouTube channel for demos.

- 🌐 Toolweb Platform: https://toolweb.in
- 🔌 API Hub (Kong): https://portal.toolweb.in
- 🎡 MCP Server: https://hub.toolweb.in
- 🦞 OpenClaw Skills: https://toolweb.in/openclaw/
- 🛒 RapidAPI: https://rapidapi.com/user/mkrishna477
- 📺 YouTube demos: https://youtube.com/@toolweb-009

## Related Skills

- **GDPR Compliance Tracker** — GDPR readiness assessment
- **DPDP Act Compliance** — India privacy compliance
- **Data Privacy Checklist** — 63-control privacy assessment
- **ISO Compliance Gap Analysis** — ISO 27701 privacy management
- **Data Breach Impact Calculator** — Breach cost estimation

## Tips

- Compare at least 2-3 vendors for a meaningful scorecard
- Adjust priority_criteria to weight what matters most to your org
- Use the scoring guide (available via /api/criteria) for consistent scoring
- Healthcare orgs should prioritize regulatory_coverage and functionality_coverage
- Use the executive summary for procurement committee presentations