Skip to content

Consulting · Data Governance

Data you can rely on: lawful, protected and provable.

We check how you handle personal data against UK and EU GDPR and ICO guidance, one control at a time, and tell you what to fix first.

  • UK GDPR
  • EU GDPR
  • ICO Accountability Framework

Sound familiar?

Signs it’s time to look at this

  • You're not sure what personal data you hold, or where it goes.

  • A subject access request would send the team scrambling.

  • A client, investor or auditor has asked for proof of GDPR compliance.

  • You're about to feed company data into AI tools.

What we cover

What’s included

Data protection

UK and EU GDPR, information security and international transfers, with each control scored on what you can actually evidence.

Data privacy

People's rights in practice: subject access requests, breach handling, records of processing and staff training.

Data quality and ownershipOn request

We list the data your teams and AI tools rely on, check its quality and give each set a named owner.

How it works

From “we think we’re fine” to “here’s the proof”

Four steps. At each one, you know what's happening, what it costs and what you'll get.

  1. 01

    Free scoping call

    Thirty minutes on your data, your AI use and what a first assessment would look like. No obligation.

  2. 02

    Assessment

    For every control we ask two questions: are you doing it, and how well? If you can't show evidence, the score can't go above a set level. Every score explains how we reached it.

  3. 03

    Your report pack

    Four clear documents, signed off by a qualified person, so you know where you stand and what to do next.

  4. 04

    Fix, then stay in control

    We help you close the gaps, most urgent first, then keep checking in so they stay closed.

What’s in your report pack

  • Where you stand

    Your current position, with a confidence level on every score.

  • Action plan

    What to fix first, across people, process and technology.

  • Risk register

    The risk behind each gap, and who owns it.

  • Evidence pack

    Audit-ready, signed off, with the working shown.

How we score maturity

Level 3 is the line between describing a control and proving it.

  1. 1

    Unsupported

    Nothing in place yet.

  2. 2

    Asserted

    You say it happens, but there's no proof.

  3. 3

    Evidenced

    You can show it happens.

  4. 4

    Measured

    You track how well it works.

  5. 5

    Sustained

    It keeps working, and keeps improving.

Often paired with

AI Governance

Know which AI your people use, and prove it's safe.

Explore AI Governance

Questions

Straight answers

The things people usually ask us first. If your question isn’t here, just ask.

Data governance is about the information itself: what you hold, why, who can see it and how it is protected. AI governance is about the tools that use that information. They overlap, because AI is only as trustworthy as the data it is fed, which is why we offer both.

Not sure where you stand? Let’s find out in 30 minutes.

A free, no-obligation call about your data and your AI use. You’ll leave with a clearer picture either way.