Software gets you execution. These engagements get you the decisions software cannot make for you — what compliant means for your business, and who owns it.
A structured review of where you stand against every operative section of the Act, delivered as a prioritised gap list with effort estimates. Two to three weeks, ending in a session with your leadership rather than a PDF in an inbox.
We connect your systems, run discovery, and sit with your engineers to confirm classification and ownership. You leave with a living RoPA rather than a snapshot, because the map keeps refreshing after we go.
Rewriting notices so they are itemised, readable and defensible — in English and the Eighth Schedule languages your users actually read — then wiring the consent capture so the receipt matches the notice shown.
We run the assessment workshops for a launch or a vendor, score residual risk with your team in the room, and leave the register populated with owners and dates.
A tabletop exercise against your real data map. We simulate an incident, time your blast-radius answer, and hand back the gaps in your response plan before a real one finds them.
Ongoing advisory hours for organisations that need a named privacy owner but not a full-time hire. Escalation path, quarterly reviews and Data Protection Board correspondence support.