When your insurer, a customer or a tender asks for proof of your security and GDPR, we get you the evidence.

Fixed price, from €3,450. For Irish businesses with 5 to 50 staff.

Book a 20-minute call Or take the free compliance check

01 · Security

Found, fixed and proven.

We check your website and email from outside, fix what we find and the basics an insurer asks about, then prove each fix with a second scan or a dated document. You get a score against CyFun Basic and an evidence pack for your insurer.

From €3,450 up to 10 staff, €4,950 for 11 to 25 and €7,500 for 26 to 50.

How Protect works

02 · Compliance

Your compliance, on record.

We work out which laws apply to you, GDPR, cookies and the AI Act among them. We write what is missing and keep it on your compliance record, with every deadline counted for you.

The free compliance check shows where you stand. The GDPR pack is €650: a privacy notice that matches your site, your record of processing, and the steps for data requests and breaches.

Take the free compliance checkBook a call about your records

Scroll down and one access request goes through each gate to a closed record, a step at a time. Under What if, the requester's identity, the checks and the reviewer's answer each change the path.

Sample data Simulated record
Record
DR-0412 access request
Status
Not opened
Due
Set on arrival
Evidence
None yet

1 · CreatedThe request becomes a record with its own reference, the time it arrived and its due date before anyone starts work on it.

From dara.quinlan@mail.example

To privacy@ardcarne.example

Data access request

Please send me a copy of the personal data Ardcarne Recruitment holds about me, from my registration with you. Dara Quinlan

or scroll down to log it

2 · CollectedIdentity is confirmed and every system that holds the requester's data is searched. Anything still missing is listed as outstanding.

Identity

Not checked yet

Systems searched

  • Candidate systemWaiting
  • MailboxWaiting
  • Shared driveWaiting

3 · ValidatedEach item is checked to be about the right person, readable and in scope. An item that fails is corrected before the record moves on.

  • Every item is about CAN-778121 of 21 items name the requesterWaiting
  • Dates and files are validEvery file opens, every date is real, and nothing is in twiceWaiting

4 · CheckedThe checks set up for access requests run, each with its result and the evidence it rests on.

  • Identity is confirmedIdentity confirmed before anything is sentWaiting
  • Every system was searchedEach system in scope searched, with a search logWaiting
  • Another person's data found in IN-3No other person's personal data in the copy (GDPR Article 15(4))Waiting
  • On course for Wed 2 DecThe due date is set and has not passedWaiting

5 · ExceptionA failed check raises an exception with its reason. The record waits for a person to resolve it, and nothing skips past.

Interview note IN-3 · CAN-7781

Second interview for the warehouse supervisor role. Strong on rostering and safety.

Panel compared notes with the other shortlisted candidate, Aoife Brennock, before the offer.

6 · ReviewedA person approves what goes out, or sends it back. The decision is kept with its time and a note.

Response pack RP-0412

21 items, a cover letter and the evidence behind each check. Reviewer: N. Kerrigan, data protection lead.

7 · RetainedThe record is closed with its outcome and kept to the retention schedule. Anything later is added as a new entry.

  • Waiting for the approval.

8 · HistoryEvery entry in order: what happened, when, whether a person or the system did it, and the evidence behind it.

DR-0412 answered on Wed 4 Nov, due

0 entries, 0 of them decisions by a person.

Evidence on the record

Open any entry in the history to see when it happened, what did it and what it rests on. Received Mon 2 Nov.

The systems demo keeps a history of every step too. See it.

History0 entries

Each step adds an entry here. Earlier entries are never rewritten.

1 of 8 · CreatedThe request becomes a record with its own reference, the time it arrived and its due date before anyone starts work on it.

  • A due date from the start

    The record opens with its due date, one month from receipt under GDPR Article 12(3), and every step is shown against it.

  • A person where it needs one

    Removing another person's data and approving what goes out are decisions by a person, kept with their name, the time and a note.

  • A history that is added to

    Each step adds an entry with its evidence. A later change adds another entry, and the earlier ones stay as they were.

03 · Systems

Your systems, joined up.

We connect the tools you already use and automate the jobs that repeat: every enquiry in one list with replies tracked, bookings through to payment, reports that fill themselves.

We built this for SmartCare Living. Every enquiry goes separately to their email, their phone, a spreadsheet and their customer records.

How Build works, from €1,500Book a call about your workflow

Scroll down and one enquiry goes from the website form through each system to the bank, a step at a time. Under What if, a declined card, a short payout or a customer who goes quiet each takes its own path.

Sample dataSimulated run

1 · EnquiryThe website form hands the enquiry to the workflow, which stores it under its own reference with the time it arrived.

Website formtullyvane.example/book

Book a course with Tullyvane Training

NameCiara Moran
CompanyHarbour & Finch Ltd
Emailciara@harbourfinch.example
CourseManual handling
People8
MessageCan you run manual handling for 8 warehouse staff in November?

A made-up customer. Scroll to send it.

2 · ChecksRequired fields, the email address and the customer are checked before anything is sent. A failed check stops the record here.

WorkflowChecks on ENQ-24817
  • Required fields are all thereName, company, email, course and number of people givenWaiting
  • The email address is validWell formed, and its domain accepts mailWaiting
  • Matched to customer CUS-3092Exactly one customer has this email addressWaiting

3 · EmailThe acknowledgement carries the enquiry's reference. Sent and delivered come from the email service; an open is only known where tracking is on.

Email serviceAcknowledgement

From accounts@tullyvane.example

To ciara@harbourfinch.example

Your enquiry ENQ-24817

Thanks Ciara. We have your enquiry about manual handling for 8 people and will come back to you about dates.

Sent Delivered Opened: not tracked

Message ID <ack-24817@tullyvane.example>. A reply that quotes it is linked to ENQ-24817.

4 · CRMThe enquiry opens a deal on the customer's record. The reply, the quote and the acceptance all attach to that one deal.

CRMDeals · CUS-3092
New enquiry
Qualified
Accepted

5 · InvoiceAcceptance creates the invoice in the accounts package with the customer, the quote's total and a Stripe payment link.

XeroINV-1043

Waiting for the quote to be accepted.

6 · PaymentStripe reports each step: started, succeeded, and later paid out to the bank, less its fee. A declined or pending payment takes its own path.

Stripepi_demo_24817

€1,440.00 EUR

Card ending 4242 · amount 144000

  1. Waiting for the customer to open the payment link.

7 · ReconcileThe bank line is matched to the payout, the payment and the invoice by reference, customer and amount. A difference stops the run and is named.

WorkflowReconciliation REC-2207
XeroINV-1043€1,440.00
Stripepi_demo_24817€1,440.00metadata INV-1043
Bank lineNot in the bank yet
  • ReferenceINV-1043 on the invoice and in the payment's metadata; the payout lists the paymentWaiting
  • CustomerCUS-3092 on the invoice, ciara@harbourfinch.example on the paymentWaiting
  • Amount€1,418.15 paid out + €21.85 Stripe fee = €1,440.00 invoicedWaiting

8 · AccountsThe payment is applied to the invoice, the fee is posted on its own line and the bank line is reconciled.

XeroINV-1043
  • Nothing is posted until the payout is matched.

9 · TrailEvery event in order, with its time, where it came from and the references it carried.

Event historyENQ-24817
  • EnquiryENQ-24817
  • CustomerCUS-3092
  • DealDL-5531
  • QuoteQT-1043
  • InvoiceINV-1043
  • Paymentpi_demo_24817
  • Payoutpo_demo_1106
  • MatchREC-2207

    A compliance record keeps the same kind of history. See one.

    Enquiry
    Not yet
    Received
    Not yet
    Customer
    Not yet
    Emails
    Not yet
    Deal
    Not yet
    Quote
    Not yet
    Invoice
    Not yet
    Payment
    Not yet
    Payout
    Not yet
    Match
    Not yet
    Accounts
    Not yet

    1 of 9 · EnquiryThe website form hands the enquiry to the workflow, which stores it under its own reference with the time it arrived.

    • One record from start to finish

      The enquiry's reference travels into the deal, the invoice, the Stripe payment and the bank line. From any one of them you can find the rest.

    • Paid means in the bank

      An invoice is marked paid once the payout reaches the bank and matches it, with Stripe's fee posted on its own line.

    • It stops where things differ

      A short payout or a payment with no reference stops the run at that point, with the reason, until a person fixes it.

    04 · Protect, kept

    Kept proven, every month.

    We scan your website and email again every week. A fix that slips reopens as ours, a fresh evidence pack is ready when your insurer or a customer asks again, and up to five of your systems are watched, with failures fixed by the next working day.

    €450 a month, after Protect or a Build.

    How Protect, kept works

    FourWinds and Eurus. FourWinds is the hands-on service for businesses with 5 to 50 staff. Eurus is our compliance platform for regulated and larger organisations, and FourWinds runs on it. FourWinds does the work, and Eurus is the software underneath it: the connections, the checks, the sealed record, the workflows and the reports. The Eurus audit is €6,300, fixed. Eurus, at eurus.ie Try Eurus live, no sign-up

    Get in touch

    Book a 20-minute call.

    Pick the days and times that suit you. We reply by the end of the next working day with a time and a video-call link, or we ring you if you leave a number.

    1. 01

      A 20-minute call

      You tell us what worries you or what takes too long. We tell you what to fix first.

    2. 02

      It is written down

      Which systems, what changes and what it costs, before any work starts.

    3. 03

      We do the work

      In the tools you already use, tested on your real cases.

    4. 04

      We keep it proven

      Weekly scans, anything that slips fixed, a fresh evidence pack when you are asked again.

    Already a client
    Open the portal →
    Days that suit optional
    Times that suit, Irish time optional

    You get an emailed copy of what you send, before it reaches us.

    FourWinds Digital (fourwinds.ie), a trading name of Oscar Cobbe, is the controller for what you send here. We use it only to answer you. Our legal basis is our legitimate interest in replying to an enquiry. We keep it for six months from our last meaningful contact, unless it becomes a client record. It reaches us by email through Resend, a US provider that takes part in the EU-US Data Privacy Framework, and we file a copy in our database in Ireland. You can ask us for a copy or for deletion at any time. You can also object to our using it, at any time. The full privacy notice has the rest.