Outcome packages

Foundation, Optimise, Assure

Each package commits to defined outcomes, with KPIs and review points agreed up front. Packages build on each other, so you can start with what matters most and grow from there.

Foundation

Know your data

DSPM baseline: sensitive data discovered, classified and risk-ranked
Quick-win remediation of your highest-risk exposures
Tuned classifiers and an agreed KPI baseline

Measured by

% of sensitive data classified · Critical exposures closed

Optimise · includes Foundation

Reduce your risk

Least-privilege automation: over-permissive access remediated at scale
ROT data clean-up: redundant, obsolete and trivial data removed, with labelling and retention applied
AISPM: shadow AI and agent data access mapped

Measured by

Exposed files vs baseline · ROT data removed · Time to remediate

Assure · includes Optimise

Govern and prove

AI guardrails: policy controls and Safe-for-AI labelling
Managed monitoring, SIEM-integrated response and ongoing remediation
Board- and regulator-ready evidence with quarterly outcome reviews

Measured by

Risk score trend · AI policy coverage · Audit findings closed

Need ROT data clean-up on its own?

Reclaim terabytes of SharePoint and OneDrive storage with a standalone ROT engagement, measured in storage and cost saved.

DSARs · also available on its own

Answer subject access requests on time, with evidence

A data subject access request gives you one month to find everything you hold on a person, across email, file shares, SharePoint, Teams and business systems. Most organisations still search by hand. We make every response fast, complete and defensible, using BigID or the platform you already have.

Readiness assessment

Know your DSAR exposure

We map where personal data lives across email, file shares, SharePoint, Teams and business systems, time a test request from start to finish, and give you a prioritised plan to close the gaps.

Measured by

Time to answer a test request · Data sources covered

Platform set-up

Find a person’s data in hours, not weeks

We configure BigID, or the platform you already have, to search for an individual across structured and unstructured data using multiple identifiers, and to automate intake and workflow.

Measured by

Search time per request · Systems connected

Managed fulfilment

We run the requests for you

Identity checks, searching, collating and preparing the response pack within the statutory deadline, with an audit trail for every request.

Measured by

Requests answered on time · Average days to respond

Erasure requests

Delete it and prove it

When someone asks to be forgotten, we find their data across your systems, route and run the deletion, then validate and document that it has gone.

Measured by

Erasures completed and validated

Your deadline is one month

Under UK GDPR you must respond within one month, extendable by two months for complex requests. The Data (Use and Access) Act 2025 confirms your search must be reasonable and proportionate, and lets you pause the clock while you confirm identity or clarify the request.

How we charge

You pay for risk reduced, not hours worked

Our fees are tied to the outcome milestones and KPIs we agree with you at the start, not to time spent or documents delivered.

That keeps us focused on the same thing you are: less exposed data, tighter access and evidence you can take to the board.

Your first 90 days

Sensitive data discovered, classified and risk-ranked
Outcome KPIs and board reporting agreed against your baseline
First least-privilege remediation playbooks live
Shadow AI and agent data access mapped
ROT data and storage savings identified

Which package fits?

Start from the question you can't answer yet

"We don't know where our sensitive data is."

Start with Foundation.

"We know, but too many people can reach it."

Move to Optimise.

"We're rolling out Copilot and need to prove we're in control."

You need Assure.

Not sure where to start?

A free data risk assessment baselines your exposure and recommends the package and KPIs that fit.