What the law asks of you
Compliance assessment
One assessment of the rules that apply to you: GDPR, the EU AI Act and accessibility. Where the law asks for one, it includes a data protection impact assessment (DPIA). You end up with a record you can hand to a board, an insurer or a customer's purchasing team.
What you get at the end. A live record of how you use personal data (GDPR Article 30) in the portal, with your legal deadlines counting down on it.
What is included
- A record of how you use personal data (record of processing), built from the systems you run
- Where your use of AI sits under the EU AI Act, with the article behind each duty
- A data protection impact assessment (DPIA) where Article 35 asks for one, in the Data Protection Commission's own format
- Where you stand on accessibility under the 2025 Act
- Gaps ranked by risk to you
- Every finding cites the article it comes from
How it works
Step 01
We find out what you do in practice
Which systems hold personal data, who can get into them, what data leaves the country and which AI tools are already in use, including any nobody approved.
Step 02
We work out which rules apply to you
GDPR always. The AI Act, depending on whether you build, buy or resell AI, and at what level of risk. The rules for your sector, where they apply. You answer questions about the business, and we match your answers to the law.
Step 03
You get findings ranked by risk
What would hurt if it went wrong, in order, with the fix for each one.
Step 04
It goes into your record in the portal
Your record of processing, your legal duties and their deadlines go live in the portal. The deadlines keep counting there. Your website and email are scanned again every week, and a connected Google Workspace is read again every night.
Questions
- What does this tell us?
- Which rules apply to you, where you stand, and what to fix first. Afterwards, the record is kept current.
- How long does it take?
- It is quoted per job.
- What if you find something serious?
- We tell you straight away, and say whether you have a deadline to report it.
Every duty in the compliance record comes from the published text of the law, is checked twice and is watched every day. How we check the law.
Book a 20-minute call
Tell us how the work is done today. We tell you what to change first, and what it costs.
Book a 20-minute call