Where client files sit, and who can open them. Checked in one week, in writing.
A one-week check of where your client data sits and who can open it: inboxes, drives, former staff, the website form and AI tools. You get a written fix list.
€1,000 check · taken off the fixes if you go ahead within 30 days · free first meeting
We look at where files sit and who can open them, never at what they say.
Read-only, under NDA
€1,000
Fixed price, taken off the fixes if you go ahead within 30 days
1 week
From access to written report
2018
Building and running live software since
3
Cities: Istanbul, Amsterdam and Miami
What we usually hear
Four signs it is time to check where client data sits
Each one is a question a client or an insurer may ask. The check gives you the answer in writing.
What we build
Four things the check covers, in one written report
Read-only, under NDA
Where client data sits
Email, shared drives, laptops, the website form, your practice software and the apps around it, mapped in one list.
Who can open what
Every account with access to client files, including former staff, shared logins and outside helpers.
AI tools already in use
Which AI tools your people use, and which client data goes into them, written down.
A written fix list
What to fix first, what it costs and what can wait, in plain words. Yours to keep, whether or not you hire us.
How it starts
One week, one fixed price, one written report.
The €1,000 comes off the fixes if you go ahead within 30 days. If nothing needs fixing, the report says so.
Who it is for
For firms that keep client files in more places than they can name
A good fit
- You hold confidential client files across email, a shared drive and a few apps.
- People have joined and left, and access was never cleaned up.
- You want a written answer before a client or an insurer asks.
Not a fit yet
-
Need a legal opinion?
We check the systems, not the law. The written report gives your lawyer the facts.
-
Had a full security audit this year?
Start with its findings. We can fix those instead.
-
Two people and one shared folder?
A careful afternoon may be enough, and we will say so.
How the week runs
Access first, then the map, then the report
-
Step 01
A short meeting and read-only access
We agree what we look at, sign an NDA and get read-only access to your email admin, drives and systems.
-
Step 02
Map the data and the access
Where client files sit, who can open them, and where the website form and AI tools send data.
-
Step 03
The written report
Within a week: what we found, ranked by risk, with a fixed price for each fix.
-
Step 04
Fix it and keep it clean
We fix what you choose. Then we review access every month, and whenever staff join or leave.
Client data & contracts
Who sees your data during the check, and under which contract
-
01
In writingWe sign our DPA as your processor
Your firm stays the controller of client data. Our Data Processing Agreement covers GDPR and KVKK, and you can read it before we meet: reactll.com/legal/dpa.
-
02
Read-only access
We look at where client files sit and who can open them, not at what they say. Anything we do hold for you is stored in the EU, on our server in Frankfurt.
-
03
An NDA before any access
We sign it before we see your systems or files. Access is personal, never a shared login, and removed when it is no longer needed.
-
04
KVKK covered for firms in Türkiye
We sign the KVKK standard contract on request, at no cost. The agreement is in Turkish too: reactll.com/legal/dpa?lang=tr.
-
05
You contract with Reaktör Teknoloji
Reaktör Teknoloji Tic. Ltd. Şti., Istanbul, trading as Reactll. Every service provider that can touch client data is listed in the DPA, with where it is based.
In production
The same pieces, running for other clients
FAQ
