Where client files sit, and who can open them. Checked in one week, in writing.
A one-week check of where your client data sits and who can open it: inboxes, drives, former staff, the website form and AI tools. You get a written fix list.
We look at where files sit and who can open them, never at what they say.
Read-only, under NDA
€1,000
Fixed price, taken off the fixes if you go ahead within 30 days
1 week
From access to written report
2018
Building and running live software since
3
Cities: Istanbul, Amsterdam and Miami
What walks in
Four signs it is time to check where client data sits
Each one is a question a client, an insurer or your DPO may ask. The check gives you the answer in writing.
What we build
Four things the check covers, in one written report
Read-only, under NDA
Where client data sits
Email, shared drives, laptops, the website form, your practice software and the apps around it, mapped in one list.
Who can open what
Every account with access to client files, including former staff, shared logins and outside helpers.
AI tools already in use
Which AI tools your people use with client data, and a simple rule for what may go in.
A written fix list
What to fix first, what it costs and what can wait, in plain words. Yours to keep, whether or not you hire us.
How it starts
One week, one fixed price, one written report.
The €1,000 comes off the fixes if you go ahead within 30 days. If nothing needs fixing, the report says so.
Who it is for
For firms that keep client files in more places than they can name
A good fit
- You hold confidential client files across email, a shared drive and a few apps.
- People have joined and left, and access was never cleaned up.
- You want a written answer before a client, an insurer or your DPO asks.
Not a fit yet
-
Need a legal opinion?
We check the systems, not the law. Your DPO or lawyer signs off on compliance.
-
Had a full security audit this year?
Start with its findings. We can fix those instead.
-
Two people and one shared folder?
A careful afternoon may be enough, and we will say so.
How the week runs
Access first, then the map, then the report
-
Step 01
A short call and read-only access
We agree what we look at, sign an NDA and get read-only access to your email admin, drives and systems.
-
Step 02
Map the data and the access
Where client files sit, who can open them, and where the website form and AI tools send data.
-
Step 03
The written report
Within a week: what we found, ranked by risk, with a fixed price for each fix.
-
Step 04
Fix it and keep it clean
We fix what you choose. Then we review access every month, and whenever staff join or leave.
In production
The same pieces, running for other clients
FAQ
