What you published
We take a notice or form your customers actually see and check it against what the law says it must contain. Not a template.
How it works
Find. Map. Test. Prove.
Anyone can fill in a form saying they do the right thing. We find your data, then check what your systems actually do, on the real systems rather than a demo copy.
Narrow
Find your data
We find the personal data in your systems, including copies you forgot about.
Check
See where it goes
We record which systems and suppliers use the data, and why.
Test
Fix and test
We find the gaps. Then we test your systems to check the fixes really work.
Prove
Keep the proof
Every test is saved with a date. When someone asks for proof, you have it.
What testing means
We test your real systems
Some duties are matters of judgement and always will be. We say which is which, rather than pretending a questionnaire is a test.
What your systems do
We send a harmless test record down the same path a real customer would take, then see where it ends up and whether it is deleted when it should be.
How long it takes
Several duties have time limits. We measure how long things really take, not how long your policy says they take.
What you get
Two answers, kept separate
Combining them into one figure is how compliance dashboards end up ignored. Kept apart, both stay honest.
How you’re doing overall
A score that goes up as you fix things, counting only what applies to you. Good for tracking progress and reporting to your board.
Whether you can say you comply
A simple yes or no. Some things are non-negotiable. Fail one and you can’t claim to comply, however good the score looks.
See it working on your own systems
A 45-minute working session. Bring a notice or consent form you use today and we will check it with you.