How [solidcore] scaled privacy operations without adding manual overhead, slowing down legal, or turning compliance into a bottleneck.
Before TrueVault, privacy requests at [solidcore] came in via email threads, were moved between teams, and were handled when people had time. The process relied heavily on manual follow-up and coordination across legal, engineering, and outside support teams. As the company expanded into new states and privacy laws multiplied, that approach stopped scaling.
Today, [solidcore] processes hundreds of privacy requests every week in roughly an hour of dedicated workflow time. What was once a manual, reactive process spread across inboxes and teams is now built into normal operations. The backlog is gone, requests move faster, and the company hasn’t needed additional headcount to keep up with growing demand.
“The growth is no longer intimidating,” says McKenna Borton, Senior Privacy & Compliance Manager at [solidcore]. “We can handle hundreds of requests each week without it taking over the day-to-day work.”
That shift gave [solidcore] something many fast-growing companies struggle to maintain: a privacy program that keeps pace with the business without creating operational drag behind the scenes.
"The growth is no longer intimidating. We can handle hundreds of requests each week without it taking over the day-to-day work." — McKenna Borton, Senior Privacy & Compliance Manager, [solidcore]
[solidcore] built one of the most loyal fitness communities in the industry through consistency, trust, and an exceptionally high standard for customer experience.
That expectation extends beyond workouts and studios. Customers expect the brands they trust with their routines, schedules, and payment information to handle their personal data responsibly as well.
When California passed CCPA in 2019, and state privacy laws began expanding across the U.S., [solidcore] recognized early that privacy compliance was becoming part of operating a modern consumer brand.
The company became one of TrueVault’s early customers and has continued evolving its privacy operations alongside its rapid expansion.
“We want to do the right thing, and we want to do it in the way that makes the most sense,” says Borton. “It does not make sense for our legal team to spend time manually processing requests that should be automated.”
Early on, privacy requests only took a few hours a month. A small team could work through them manually without much disruption.
That changed as [solidcore] expanded into new markets, adopted more technology vendors, and faced privacy requirements with different timelines and obligations across multiple states.
What once felt manageable gradually became difficult to sustain as the business expanded.
“We would have had to staff multiple team members just to keep up,” Borton explains. “I don’t know how we could have handled our current volume otherwise.”
The pressure wasn’t coming from a single issue. New laws introduced additional requirements, while a growing vendor ecosystem created more data flows to track and manage. Manual processes created more room for delays, inconsistencies, and follow-up work that pulled legal and operational teams away from higher-value responsibilities.
Today, [solidcore]’s privacy operations run through a structured workflow instead of scattered inboxes, manual coordination, and internal follow-ups.
Privacy requests are now part of the company’s normal operational routine instead of a recurring cleanup project sitting in the background. The work no longer depends on a single person carrying all the institutional knowledge, and team members across departments can step in when needed without extensive training or complex handoffs.
“TrueVault is intuitive,” says Borton. “If I take a vacation, others can easily step in and keep things moving.”
For a lean legal team supporting a rapidly growing company, that flexibility matters. Privacy operations are now built into the company’s normal workflows, even as request volume continues growing.
One of the biggest operational improvements came from visibility.
Like most modern consumer brands, [solidcore] relies on a growing ecosystem of vendors, platforms, integrations, and marketing tools that all process customer data in different ways. Keeping track of those relationships manually became increasingly difficult as the business expanded.
With TrueVault’s data mapping and vendor visibility tools, [solidcore] now has a clearer understanding of how customer data moves across the business and where additional compliance obligations may exist.
That visibility helps operational teams move faster when evaluating new vendors and technology partners.
“It’s great for growth because onboarding a new technology partner doesn’t become a compliance obstacle,” Borton explains.
Privacy reviews no longer happen as a last-minute operational hurdle. The process is more organized, easier to maintain, and far less disruptive for teams trying to move quickly.
Privacy compliance continues changing as new state laws pass, regulators issue guidance, and vendors adjust how customer data is collected and shared.
For [solidcore], staying current requires people who actively monitor those changes and translate them into practical next steps for the business.
That’s where TrueVault’s customer success and legal monitoring support became an important part of the relationship.
“It’s great to have a partner who comes back and says, ‘Did you catch that this change might impact your business?’” Borton says. “Having that human element of the privacy partnership is fantastic.”
That responsiveness extends into product development as well.
“There are updates I’ve asked for and then seen arrive in the product,” she adds. “They have a vested interest in helping the tool evolve alongside their customers.”
With TrueVault, [solidcore] now has:
“I wouldn’t be able to focus on the important privacy work if these processes weren’t automated,” Borton says.
[solidcore] built its brand on customer trust. TrueVault helps the company maintain that trust through privacy operations that continue working as the business grows.
Disclaimer: This content is provided for general informational purposes only and does not constitute legal or other professional advice. Without limiting the foregoing, the content may not reflect recent developments in the law, may not be complete, and may not be accurate or relevant in an applicable jurisdiction. This content is not a substitute for obtaining legal advice from a qualified licensed attorney in the applicable jurisdiction. The content is general in nature and may not pertain to specific circumstances, so it should not be used to act or refrain from acting based on it without first obtaining advice from professional counsel qualified in the applicable subject matter and jurisdictions.
Get monthly updates on the latest updates on policy & the shifting privacy landscape.
Dive into a world of knowledge, trends, and industry updates on the TrueVault blog.
