Financial services
DORA registers and incident reporting
Banks, payment and investment firms, insurers and brokers.
When you get asked
The Central Bank, your auditors and your board want DORA's registers and incident reports, on time.
What we do
Your tech supplier register, as DORA asks, kept current; incidents reported on time; and a sign-off for the board.
Software and IT
Security questionnaires and ISO 27001
Software, cloud and managed IT firms selling to bigger customers.
When you get asked
A bigger customer sends a security questionnaire, and the deal waits on the answers.
What we do
Questionnaires answered from your record, the security questions NIS2 customers ask, and ISO 27001 readiness.
Health and care
Health data and patient records
Clinics, practices, labs and care providers.
When you get asked
A patient asks for their records, a supplier changes, or something goes wrong with health data.
What we do
Who can reach records, suppliers handling health data, and incidents reported on time.
Professional services
Client files and AI tools
Accountants, tax advisers, solicitors and consultancies.
When you get asked
A client asks how their files are kept, or which AI tools touch their work.
What we do
AI tools used with client work, access to client files, and data requests answered within the month.
Recruitment and staffing
Candidate data and AI screening
Recruitment agencies, staffing firms and HR service providers.
When you get asked
A candidate asks what you hold on them, or a client asks how you screen.
What we do
CV use explained to candidates, retention set, and AI screening ready for 2 December 2027.