DataParade – generate dataflow diagrams from code for risk assessments
As a privacy and security engineer for the past nine years, I’ve probably done close to 1000 privacy and security risk assessments. The pain points and pet peeves I’ve come across in this work led me to build DataParade. Questionnaires suck, and so does cramming in a risk assessment right before you want to launch. PARADE stands for Processing Activity Risk Assessment Diagramming Environment. The premise is simple - a dataflow diagram, embedded with security and privacy controls and metadata, can answer all the questions in a security or privacy risk assessment. Why dataflow diagrams?…
What it does
In the maker’s words, at launch
As a privacy and security engineer for the past nine years, I’ve probably done close to 1000 privacy and security risk assessments. The pain points and pet peeves I’ve come across in this work led me to build DataParade. Questionnaires suck, and so does cramming in a risk assessment right before you want to launch. PARADE stands for Processing Activity Risk Assessment Diagramming Environment. The premise is simple - a dataflow diagram, embedded with security and privacy controls and metadata, can answer all the questions in a security or privacy risk assessment. Why dataflow diagrams? Because risk follows dataflow. And because a picture really is worth a thousand words, especially in this context. Early feedback told me that nobody wants to create another artifact from scratch. So my first priority has been to build out a code-scan-to-diagram pipeline which allows you to bootstrap diagrams using our CLI tool (https://github.com/DataParade-io/dataparade-cli) This is what the CLI tool does today: - Point the CLI at a repo, and it writes a dataflow.json you can import as a starting diagram in the DataParade app. After the scan, you will see a link to our web app where you can further manipulate the diagram, continue annotating it with security and privacy properties, and add more nodes, data transfers, and actors. - No paywall. I'm just looking to stress-test the scanner across real codebases right now and get general feedback; maybe identify some design partners along the way. - It currently parses TypeScript, JavaScript, Python, and Terraform (Java/Go on deck). - The scan runs locally. By default, the resulting diagram is uploaded to a workspace so you get a link to open it in the app (use the --skip-auto-upload flag to keep it fully local). - .env files never get read. - We don't point an LLM at your repo and hope. A deterministic pattern engine derives your dataflow diagram directly from the code. An optional AI pass enriches it and cites evidence for every suggestion; or use the --no-ai-inference flag for deterministic-only output with zero model calls. - The optional AI enrichment runs through our platform, so anonymous AI scans are rate-limited (to keep costs sane during this stress test). If you hit the limit, add the --no-ai-inference flag to keep going structurally, or grab a workspace key. - Open source, GPL-3.0: https://github.com/DataParade-io/dataparade-cli My ask: I’m looking for feedback on scans/diagrams across a wide range of architectures and technologies… - Is your diagram missing a service? - Did it draw a flow backwards? - Did it choke on your monorepo? - What other languages/frameworks would you like to see supported? - Any other suggestions on how we can make DataParade awesome? The more stacks we see, the more robust DataParade becomes. I look forward to reading through your feedback in these comments (both good and bad). Thank you in advance!
Does the same job
all alternatives →- PIParabola.io – Automate your work with visual programming2018 · parabola.io · ▲291
Hi HN! I’m Alex from Parabola (https://parabola.io). Parabola is a visual programming tool for creating functional data flows that everyone can use. It’s entirely drag-and-drop, handles data sizes much larger than a traditional spreadsheet, calculates everything live, and can run your flows on a schedule of your choosing. I used to work in strategy consulting, doing data analytics for SMBs and Fortune 500 companies. The amount of time wasted on menial tasks was astounding. Things like cleaning data, generating custom reports, creating human workflows to solve shortcomings in third…
Evidence Embedded AnalyticsDec 2025 · ▲122A modern dev workflow for your most important data products
More dev tools this month
the category →
Open-source GTM skills for technical founders
Dev tools · 29d ago · gtmcofounder.com
OpenTrailPaper is open-source bike computer firmware for the LilyGO T5S3 4.7" E-Paper PRO. It supports offline maps, GPX routes, FIT recording and Bluetooth sensors.
Dev tools · 1d ago · opentrailpaper.com
Launched alongside, July 2026
the whole month →- IR
I might be the only SRE on Earth with his own bowling center. It's a more in-depth gig than you'd think. My family and I bought an abandoned 8-lane bowling center in the rural mid-west. In our small town there weren't many recreation options for families. You've heard of a food desert? This is an R&R desert. It had been abandoned for a good reason. The roof leaks, the electrical system was constantly surging, and my 70-year-old bowling equipment (still) doesn't work perfectly. The system that keeps your score is particularly interesting to me. It's the thing you watch during your game, but…
Life & fun · Jul 2026
- EElevators▲1,680
Life & fun · Jul 2026 · john.fun
- 1W18 Words▲1,160
Life & fun · Jul 2026 · 18words.com
- BA
Over the past few months, our team has been building more and more slidedecks using web frontend technologies with coding harnesses like Claude Code, but a common complaint is to make even small edits we need to edit the code either manually or via the harness. To avoid this loop, I ended up creating Bento, a single HTML file with everything you need in a slide tool including animations and shared editing. There's no install or cloud login, everything works offline. The default deck is around 560 KB and it doesn't need to fetch anything once you got it. Open it in a browser and then you can…
Dev tools · Jul 2026 · bento.page
- GG
A few days ago I found myself trying out GLM 5.2 and was really positively impressed. The capabilities and security I was getting from this LLM are similar to those I've gotten from models like Claude or GPT, and this really surprised me. But then I thought, "I wonder how it would work on a normal computer like mine," and above all, "I wonder if it would work without going into OOM on a computer like mine." So I started working with the help of agents to test this possibility. I started converting the model to int4, understanding MTP usage, and if possible implementing DSA for long context.…
AI · Jul 2026 · github.com
