Security & Compliance

GDPR & data-protection advisory

For EU customers and EU data, including the transfer mechanism question.

Typical duration
3–8 weeks
Scope
Fixed and written before you sign
Team
Delivered by the principal

Who it is for

Anyone with EU customers or EU data.

Everything below is in the scope document, written and priced before anything starts. If something you need is not on this list, say so and it goes in the quote — or we tell you it does not belong in this engagement.

  • Lawful basis and records of processing
  • Transfer mechanism for India-based processing, with the assessment documented
  • Data processing agreements and sub-processor register
  • DPIA for high-risk processing, including AI systems
  • Subject access request process that can actually be operated

How every Security & Compliance engagement runs →

Next step

Thirty minutes on whether this is the right engagement.

If a different service on this list fits better, or if you do not need us at all, that is what the call will conclude.