ChatDiagram
Essayer gratuitement
privacy · gdpr · customer support

Customer support ticket data flow.

This GDPR data flow diagram maps a support request from a customer to an application and an external support platform. The support service looks up the account, logs the ticket event and sends the ticket content to the processor that hosts or manages the case. The response returns through the same service, making the processor’s role and the boundary crossings clear. Privacy and support teams can use this as a compact starting point for reviewing which customer details appear in tickets, who can access them and whether attachments require a separate store. Replace the generic labels with the organization’s systems and actual data categories. The diagram is a process map, not proof that a support operation meets GDPR requirements.

Type Modèle de menaceNorme Shostack, Threat Modeling (2014)Moteur schematex-threatmodelMis à jour 24/09/2026
Customer support ticket data flow
Drawing preview
La demande

“A GDPR data flow for customer support: a customer sends ticket and contact details to a support portal, which sends a support request to a support service; the service looks up the account, writes a ticket event to an audit log, sends ticket content to an external support platform, and receives an agent response. Show public internet, application and support processor boundaries.”

Essayez ensuiteAdd a file attachment store in the application boundary.Add an identity check before the account lookup.
Ce que contient ce dessin

Comprenez les décisions qui le sous-tendent.

01Customer contact

Ticket and contact details enter from the public internet.

02Processor use

Ticket content crosses to an external support platform.

03Access context

The service performs an account lookup before handling the case.

Use this DFD to map a customer-support process before reviewing access and vendor handling.

Voir tous les modèles de modèle de menace →

FAQ

Questions fréquentes

Why include an account lookup?

It shows that support handling may access account information in addition to the ticket itself.

What is a support processor?

It is an external service that processes ticket content on behalf of the organization.

Should attachments be shown separately?

Yes, if attachments go to a different store or are handled under different access or retention rules.