Compliance capacity that scales with you.
Our fractional compliance retainer gives you senior governance, risk and compliance consultancy from as little as one day a month. Use the time wherever your business needs it, and add days as your programme grows.
From £1,150 a month plus VAT · Led by a practising lead auditor
Regular expertise, without a full-time hire.
Most growing organisations need senior compliance expertise every month, but rarely enough for a full-time role. Start with a day a month and add capacity as your obligations grow.
Certified, or working towards it
You hold, or are working towards, a certification such as ISO/IEC 27001 or the DVS Trust Framework, and need your management system to stay effective between audits.
Ongoing data protection
You need regular data protection support, including an appointed Data Protection Officer, without hiring one.
Growing quickly
Your compliance workload changes with new products, customers and markets, and you need capacity that can change with it.
What your days can cover
Use the time across any part of the business, and move it as your priorities change.
- Data Protection Officer
- Appointment as your Data Protection Officer, or as your UK representative under Article 27 of the UK GDPR.
- Management systems
- Implementing the DVS Trust Framework and ISO management system standards built on Annex SL.
- Internal audit
- Internal audits of your management systems, carried out by a practising lead auditor.
- Data protection compliance
- UK GDPR, EU GDPR and wider data protection compliance, including PECR.
- Incident and breach response
- Support when a security incident or personal data breach happens.
- Supplier due diligence
- Assessing the suppliers that handle your data and run your systems.
- Technical controls
- Implementing the technical controls your standards and risk assessment call for.
- Staff awareness and training
- Awareness sessions and training that help your team meet their responsibilities.
Standards and frameworks
Where you work to more than one, we run them as an integrated management system: one risk process, one internal audit and one management review.
| Standard or framework | Focus |
|---|---|
| ISO/IEC 27001:2022 | Information security management |
| ISO/IEC 27701:2025 | Privacy information management |
| ISO/IEC 42001:2023 | Artificial intelligence management |
| ISO 9001:2015 and ISO 9001:2026 | Quality management |
| ISO 22301:2019 | Business continuity management |
| DVS Trust Framework 1.0 | Digital identity and attribute services |
| UK GDPR, EU GDPR and PECR | Data protection and electronic communications |
How the retainer works
You decide how your time is used, as full days or shorter sessions across the month. When you need more, add days to your allocation.
Onboarding
We agree priorities, contacts, access and your starting allocation, review your documentation, obligations and upcoming audits, and set a plan for the first three months.
Monthly planning
At the start of each month, we agree that month's priorities with your named contact.
Delivery
We work remotely or, where agreed, on site, as full days or in shorter sessions across the month.
Review
A monthly summary of time used, work completed and open actions, and a quarterly review of priorities and whether your allocation still fits.
Unused time, additional days and changes to your allocation are covered by our Professional Services Agreement, which you sign before the retainer starts.
Ask about the terms →Start small, scale when you need to
Begin with one day a month and increase your allocation when certification, customers or growth demand more. A predictable monthly cost, with the experience of a practising lead auditor and Data Protection Officer.
Larger allocations and additional days are agreed with you. Invoicing, payment terms, the term of the retainer and notice are set out in the Professional Services Agreement.
Fractional compliance retainer
From£1,150a month
For small and medium-sized organisations that need regular governance, risk and compliance support.
- From one day of consultancy a month
- Add days as your needs grow
- Allocated flexibly to your priorities
- Remote or on site
- Monthly summary and quarterly review
- Data Protection Officer appointment available
Only need a Data Protection Officer? DPO as a service starts at £595 a month.
Compare DPO plans →Plan your first month.
Book a free 30-minute discovery call to talk through your priorities and the right starting allocation.