Packages
Pick the work.
We scope the price.
Fixed-scope engagements across privacy, security and AI governance. No hourly billing and no surprise invoices. A short scoping call sets one fixed price.
How pricing works
Priced to your estate,
not by the hour.
Every package is quoted after a scoping call. You see one fixed price before any work starts.
Fixed scope
One price for a defined scope, agreed in writing before we begin.
Quoted after a call
A 30-minute call to review your systems, frameworks and timeline, then a proposal.
Done once across frameworks
Run privacy, security and AI together and the shared work is done a single time.
The engagement
Three stages.
Start where you are.
Readiness to find the path, Implementation to build it, Managed to keep it running. Take one stage, or run them end to end.
Know exactly where you stand, and the shortest path to compliant.
Compliance gap assessment
A risk-ranked roadmap to any framework you choose.
You receive
- Gap analysis across your stack
- Prioritised remediation roadmap
- Executive risk brief
Quoted after a scoping call
Get a quoteData discovery and RoPA
Know what personal data you hold, and where it lives.
You receive
- Personal data classification map
- Records of Processing (RoPA)
- High-risk processing flagged
Quoted after a scoping call
Get a quoteAI risk and EU AI Act classification
Know your AI risk tier and what the law asks of you.
You receive
- System classification and tiering
- AI risk register
- Obligations brief
Quoted after a scoping call
Get a quoteThe system installed and the documents executed, done for you.
DPDPA implementation
Fully DPDPA compliant and board-ready, in 30 days.
You receive
- Consent and DSAR software deployed
- Policies and DPAs executed by counsel
- One-click board audit pack
Quoted after a scoping call
Get a quoteISO 27001 and SOC 2 build
Certification-ready, without the internal scramble.
You receive
- Controls deployed across your estate
- Full policy suite
- Internal audit and evidence
Quoted after a scoping call
Get a quoteEnterprise AI assurance sprint
Clear the buyer's AI risk review and close the deal.
You receive
- Trust dossier and model card
- Answers to security questionnaires
- Guardrail and red-team review
Quoted after a scoping call
Get a quoteVAPT and penetration testing
Find and fix what an attacker would, before they do.
You receive
- Full vulnerability report
- Remediation guidance
- Free retest after fixes
Quoted after a scoping call
Get a quoteA named team keeps you audit-ready, every day.
Virtual DPO
A certified Data Protection Officer, on call and accountable.
You receive
- Named CIPP/E or CIPM officer
- Rights and breach handling
- Board and regulator liaison
Quoted after a scoping call
Get a quoteVirtual CISO
Security leadership without a full-time hire.
You receive
- Security programme ownership
- Risk and vendor reviews
- Board-level reporting
Quoted after a scoping call
Get a quoteContinuous monitoring
Stay audit-ready every day, not just at renewal.
You receive
- Continuous control monitoring
- Evidence collected for you
- Periodic internal audits
Quoted after a scoping call
Get a quoteBoard and regulator representation
Expert representation when it matters most.
You receive
- Formal response drafting
- Regulator liaison
- Incident representation
Quoted after a scoping call
Get a quoteAlways included
What every engagement
comes with.
A named expert
A person who owns your work, not a ticket queue.
Deliverables you own
Documents and evidence you can hand to a board or an auditor.
A fixed price
Agreed before we start. No hourly billing, no scope creep.
No lock-in
Keep everything we build. Leave whenever you choose.
Questions
Questions about scope and price.
Why are there no prices on the page?
Every estate is different. We quote one fixed price after a short scoping call, so you never get an open-ended hourly bill.
What happens in the scoping call?
Thirty minutes. We review your systems, frameworks and timeline, then send a fixed-scope proposal with a fixed price.
Can we start with just one framework?
Yes. Start with one, add others later. Run several together and the shared work is done once.
Do we have to take all three stages?
No. Start where you are: a readiness assessment, a full implementation, or an ongoing managed retainer.
One call to scope it
Book a 30-minute
scoping call.
Tell us your systems and the frameworks that apply. You leave with a clear scope and a fixed price.