Data Privacy Audits
Our specialists review how personal data moves through your organisation, measure your practices against the law and give you a clear, evidence-based report of where you comply and where you are exposed.
We show you exactly where your data lives
Most privacy risk hides in places nobody has looked at for years, in old databases, shared drives and third-party tools. We trace personal data across your systems, test your controls against the regulation and hand you findings you can act on.
Data Mapping
A full inventory of the personal data you hold, where it sits and which systems and people can reach it.
Data Flows
How information moves between departments, applications and suppliers, including transfers you may have forgotten.
Legal Compliance
A check of your processing against lawful basis, consent, retention and transparency requirements.
Third-Party Sharing
Review of processors and vendors, the contracts behind them and the data you pass to each one.
Retention & Disposal
Whether you keep data only as long as you need it and delete it securely when you do not.
Documentation Review
Assessment of your privacy notices, policies and records against what you actually do in practice.
You Cannot Protect What You Cannot See. An Audit Gives You The Full Picture.
Personal data spreads quietly. A spreadsheet here, a marketing tool there, a supplier who quietly copies your records to a server abroad. Over time the gap between what your policies say and what your systems actually do keeps growing, and that gap is exactly where breaches, complaints and regulatory action begin.
We audit with the eye of an assessor and the practicality of an engineer. Our team interviews the people who handle data, examines the systems that store it and tests your controls against the regulation. You receive a written report that grades each area, ranks the risks by likelihood and impact, and sets out a remediation plan your team can start on straight away.
Standards and Frameworks We Assess Against
- We measure your practices against the GDPR and applicable national data protection laws, using the accountability principle as the benchmark for what you must be able to demonstrate.
- Our audit approach draws on ISO/IEC 27701 for privacy information management and ISO/IEC 27001 for the underlying security controls, so findings map to standards your board already recognises.
- Where relevant we reference the NIST Privacy Framework to structure how you identify, govern and control privacy risk across the organisation.
Aligned to the frameworks that matter
Our testing follows the methodologies that set the global standard for application security.