Compliance & GDPR
Prepare for audits and client security questions
Compliance & GDPR
Clients and partners now ask how you protect their data, and some contracts require GDPR, ISO 27001, SOC 2 or PCI DSS. We assess where your business stands against the standard you need, list the gaps, and help you close them with policies, technical controls and the records an auditor expects to see. We prepare you for the audit; the certificate itself comes from an accredited certification body.
What We Deliver
What's included in Compliance & GDPR.
GDPR readiness
Data mapping, lawful basis, privacy notices, consent and handling of data subject requests for businesses that serve people in the EU.
ISO 27001 preparation
Scope, risk assessment, Statement of Applicability and the core policies of an information security management system.
SOC 2 readiness
Controls mapped to the Trust Services Criteria, with the evidence you will need for an auditor's review.
PCI DSS guidance
Reducing where card data is handled and checking the controls around payments, for businesses that take card payments.
Indian data protection
Reviewing how you collect and store personal data in light of India's Digital Personal Data Protection Act.
Policies and evidence
Written policies, registers and records kept in one place, so audits and client questionnaires take less effort.
Our Process
How the work runs, step by step.
Gap assessment
We review your current practices against the chosen standard and list what is missing.
Remediation plan
We rank the gaps by risk and effort, and agree on who fixes what.
Policies and controls
We draft the policies and help your team put the technical and process controls in place.
Readiness check
We gather the evidence and run an internal review before the external audit.
Audit support
We help you answer auditor questions and fix any findings raised during the audit.
Frequently Asked Questions
Common questions about Compliance & GDPR.
No. Certificates and attestation reports come from accredited certification bodies and licensed auditors. We prepare your business for that audit.
It can. GDPR applies when you offer goods or services to people in the EU or monitor their behaviour, even if your office is in India. We can help you work out whether it applies to you.
Usually the one your clients or contracts ask for. If no one has asked yet, a gap assessment against ISO 27001 is a practical start, because its controls overlap with the other standards.
Yes. We help you prepare accurate answers and the supporting documents clients usually ask for.
Other Cybersecurity services
- Security Audit A structured review of your web applications, servers and code, with a written report that ranks each finding by risk.
- Penetration Testing Simulated cyber attacks to identify exploitable vulnerabilities before attackers do.
- Incident Response Help containing a security incident or data breach, finding out how the attacker got in and bringing systems back safely.
- Secure Code Review Static and dynamic analysis of source code to detect security flaws.
Facing a compliance requirement?
Tell us which standard your clients or contracts ask for and we will start with a gap assessment.