Services
We work in focused engagements or as your ongoing privacy office. Every service ties back to a single outcome: your organisation knows where its personal data is, what the rules require and how to keep it that way.
A privacy office that runs week-to-week.
We stand up — or augment — your privacy office: governance, accountable individual, programme cadence and management reporting. Engage us as fractional DPO or to coach an internal lead.
A defensible record of what you hold and where it flows.
Discovery interviews, system inventories and dataflow diagrams that become your living Record of Processing Activities — useful to engineering, legal and security alike.
Risk decisions documented before they bite.
PIAs and DPIAs that are practical, proportionate and traceable to specific controls. Tailored templates per jurisdiction (PIPEDA, BC PIPA, Alberta PIPA, GDPR).
Risk you can rank, treat and report.
A privacy-anchored risk register, control library and assurance plan, mapped to the frameworks you already use (NIST CSF, ISO 27001, SOC 2).
Plain-language documents your team will actually use.
Privacy notices, internal policies, data-handling standards and a retention schedule built around how your business operates — not generic templates.
Calm response when it matters.
Incident playbooks aligned to Canadian breach-notification thresholds, tabletop exercises with executive and technical tracks, and post-incident reviews.
Confidence in the partners that touch your data.
Diligence questionnaires, contract clauses, transfer impact assessments and ongoing vendor monitoring proportionate to risk.
Privacy that sticks past onboarding.
Role-specific training for executives, engineering, marketing, HR and customer-facing teams — plus reinforcement campaigns.
Take our free 10-question privacy maturity assessment. You'll receive a scored report and a tailored recommendation in your inbox.
