Services

Outcome-first engagements, fixed in scope

Two fixed-fee assessments to find out where you stand, and a retainer to keep you moving. Each one works with the tools you already have.

Data Protection Health Check

Know what your data protection is actually doing, and what to fix first.

The problem

You own data protection tooling: data loss prevention, sensitivity labels, data discovery. But nobody can say with confidence whether it is configured properly, covering the data that matters, or stopping anything at all.

What you get

  • A review of your current data loss prevention, labelling and data discovery, measured against what you are already licensed for.
  • A map of the main ways data can leave your organisation: email, web, cloud services and endpoints.
  • A findings report, with every finding rated by severity.
  • A clear view of the capabilities you own but are not using.
  • A prioritised 90-day roadmap.
  • A readout session with your security lead.

Not included

  • Remediation work
  • Formal audit or certification
  • Legal advice

AI Readiness and Oversharing Assessment

Roll out AI assistants without surfacing data people should not see.

The problem

You want to roll out AI assistants, or you suspect staff already paste work data into AI tools. AI assistants can find anything a user has access to, so files that are overshared today become answers tomorrow, in front of people who should never see them.

What you get

  • An oversharing heatmap of your highest-risk sites, and why each one is risky.
  • A readiness verdict (ready, ready with conditions, or not ready) with the conditions listed.
  • A sequenced remediation plan, ordered to reduce exposure fastest.
  • Draft acceptable-use points for AI tools, ready for you to adapt.

Not included

  • Remediation work
  • AI vendor selection
  • Building AI solutions
  • Legal or privacy advice

Advisory Retainer

Keep your data protection roadmap moving, with senior advice when you need it.

The problem

You have a roadmap but no senior data protection expertise on tap to steer it. Decisions stall, designs go unreviewed, and licence spend drifts away from what you actually use.

What you get

  • A fixed number of hours each month.
  • Design and change reviews before changes reach production.
  • Roadmap steering as your priorities shift.
  • Vendor and licence advice.
  • A monthly check-in, with a short written summary.
  • Next-business-day response by email.

Not included

  • Hands-on operation of your tools
  • On-call or 24/7 support
  • Incident response

A note on compliance

We map our findings to Essential Eight and ISM expectations, so they fit how you already report risk. We do not provide legal advice, and our assessments are not a formal audit or certification.

Not sure which engagement fits?

We will tell you plainly whether we can help, and which engagement fits.