The record, written
Compliance assessment
One assessment across the regimes that actually reach an Irish SME: GDPR, the EU AI Act, accessibility, and a DPIA where the law asks for one. You end up with a record you can hand to a board, an insurer or a procurement team.
What you hold at the end. A live Article 30 record in the portal, with the statutory clocks running on it.
Compliance record · In scope
A laptop showing the compliance record: eighteen obligations in scope, split into eleven answered on the record, four with nothing on file yet, and three that need a person to say; then each obligation with the article it comes from and what answers it.
Demonstration figures. The record never says a business is in the clear. It says which obligations reach it, what answers each one, and where the evidence sits.
How it works
Step 01
We find out what you do in practice
Not what a policy says. Which systems hold personal data, who can reach them, what leaves the country and which AI tools are already in use, including the ones nobody signed off.
Step 02
We work out which rules apply to you
GDPR always. The AI Act depending on whether you build, buy or resell, and at which risk tier. Sector rules where they bite. You answer questions about the business; we map them to the law.
Step 03
You get findings ranked by exposure
What would hurt if it went wrong, in order, with the fix against each one. Not a compliance checklist with 200 rows and no priority.
Step 04
It lands in the record, not in a PDF
The record of processing, the obligations and the deadlines go into the portal, live, where the clocks keep running. A report in a drawer is out of date the week it is written.
What is included
- Article 30 records, built from what you actually run
- EU AI Act classification with the article behind each duty
- DPIA where Article 35 asks for one, in the DPC's own structure
- Accessibility position against the 2025 Act
- Gaps ranked by exposure, not by how easy they are
- Every finding cites the article, so you can check it rather than trust it
Questions
- What does this actually tell us?
- What applies to you, where you stand against it, and what to fix first. Compliance is a state you maintain rather than a certificate, so be careful of anybody offering you the certificate.
- How long does it take?
- Two to three weeks for most businesses.
- What if you find something serious?
- We tell you immediately, and we tell you whether it carries a notification deadline.
Talk to us
Tell us what the work looks like now. We will say whether Compliance assessment is the right line for you, and what it would cost.
Send us the detail