Service / Data protection

Protect your data. Then test the restore.

Who can access what, encrypted backups and logs, then a full restore you watch. Staff use of AI is covered too.

Describe your project →See an example
Access
by role, reviewed
Backups
encrypted, off-site
Restore
tested with you
AI use
local or under contract

01 / What you get

Six controls. Each one you can check.

Access control

Roles instead of shared passwords, two-factor sign-in, reviewed on a schedule.

roles.yml

Encrypted backups

Copies kept off-site, separate from the systems they protect.

backup-plan.md

Restore test

A full restore to an isolated copy, timed, with you watching.

GDPR Art. 32(1)(c)

Logs

Who signed in and what changed, kept for an agreed period.

audit.log

Incident checklist

Who does what in the first hours, including the 72-hour notice.

GDPR Art. 33

AI use by staff

Client data kept out of personal chatbots.

AI data leakage →

02 / How it runs

Five steps. The last one repeats.

  1. Review

    data, people, systems

  2. Plan

    controls, in writing

  3. Set up

    access, backups, logs

  4. Test

    a restore, with you

  5. Repeat

    on an agreed schedule

03 / Example

An access review and a restore. Both logged.

Illustrative. Accounts and times are invented.

Example · invented data

protect
$ make access-review23 accounts · 4 roles2 former staff still active → disabled5 shared logins → personal accounts$ make restore-test SCOPE=fullrestored to an isolated copy in 38m · data matches

04 / What to send us

  1. 01Which data you hold, and where
  2. 02Who has access today, even roughly
  3. 03How you back up today
  4. 04Whether staff use AI tools with company data

05 / Related

06 / FAQ

Will this make us GDPR compliant?

No supplier can promise that. We set up and document technical measures of the kind GDPR Article 32 asks for. Policies and the legal assessment stay with you.

How often should a restore be tested?

GDPR asks for regular testing of security measures (Article 32(1)(d)) without fixing a period. We agree a schedule with you and log each test.

Our staff use ChatGPT. Is that covered?

Yes. Our AI data-leakage page sets out the risks and the setup we recommend: a local model, or business versions of the tools under contract, with logs.

Do you do penetration testing?

No. We set up and check the controls. A formal penetration test is a separate job for a specialist.

Describe your setup

Where your data is, who can reach it, how you back it up.

  • Fixed-scope quote — no obligation
  • Reply within 1 business day

By sending this, you agree that we may contact you about this inquiry.