Where do our data travel, who reaches them, and what is said about us ?
The three diagnostics conducted together answer what none of them can answer alone: the complete map of flows, access and presence, with the on-site survey and the offensive reconnaissance included. This is the report an executive team can put in front of its board.
- Price8 900 € excluding VAT, fixed price
- Lead time20 working days
- Who it is forup to three legal entities and ten sites
5surveys
Inside a single reportSovereignty, compliance, visibility, on-site survey and offensive reconnaissance. Bought separately, those five surveys cost 12 150 € excluding VAT.
Your executive team has to decide on the whole picture: data, sites, vendors, presence, compliance. The cabinet therefore conducts the three diagnostics on one schedule, with the on-site survey and the offensive reconnaissance included at no extra cost, and crosses the findings instead of stacking them, because a regulatory gap is usually explained by a technical fact already surveyed. You receive the mapping of data flows entity by entity, a single ranking of the gaps covering what closes this week, this quarter and this year, and one delivery session with your executive team on day 20. The published price is 8 900 € excluding VAT for up to three legal entities and ten sites, against 12 150 € excluding VAT for the same five surveys bought separately.
A board-level report, not five files to staple together.
- The three diagnostics conducted together, with their findings crossed instead of juxtaposed.
- The mapping of data flows, entity by entity, from collection to retention.
- The on-site survey and the offensive reconnaissance, included at no extra cost.
- A single ranking of the gaps: what closes this week, this quarter, this year.
- A delivery session with your executive team, and the signed report in open formats.
Scoping and access
Perimeter of entities and sites, read-only access, reconnaissance mandate signed.
Surveys
The five surveys carried out by the same engineer, the day on site included.
Crossing
The findings answer one another: a compliance gap is usually explained by a technical fact.
Delivery
A session with your executive team, signed report handed over the same day.
The limits, in writing.
An engagement that does not state its limits lets the client discover them at the worst possible moment.
- This is not a penetration test, and the reconnaissance it includes remains free of any exploitation.
- This is not a remediation project: the audit says what has to be closed. Closing it is the remediation plan.
- Beyond three entities or ten sites, the perimeter is costed separately: the published price is not a ceiling.
One report, one ranking, one signature.
The sovereignty part is deducted in full from the first quarter of a governance contract. No follow-on is imposed.
A first conversation of 30 minutes
No obligation, no access to your systems. We look at whether the step you are considering is the right tool for your situation, and the cabinet says no when it is not.
A signed scoping letter
The perimeter, the read-only access, the people, the delivery date and the firm price. Nothing starts before your signature.
The report, then the decision
A dated report that holds up in front of a third party, a session with your executive team, and the list of gaps ranked. You then decide what follows, or you stop there.
5 questions, 5 answers.
The cabinet's answers, in plain terms. If your question is not here, ask it: the answer comes back to you in writing.
What does the full audit include, and what does it cost?
8 900 € excluding VAT, fixed price, over 20 working days, for up to three legal entities and ten sites. It includes the sovereignty, compliance and visibility diagnostics, the on-site survey and the offensive reconnaissance, the mapping of data flows, a single ranking of the gaps and a delivery session with your executive team. The same five surveys bought separately cost 12 150 € excluding VAT.
Why conduct the three diagnostics together rather than one after another?
Because their findings explain one another. Most regulatory gaps come from a technical fact already surveyed, and a lost position in the engines often comes from a rebuild that also moved the access rights. Conducted together they produce one ranking instead of three files that have to be reconciled by hand.
Can it be used to prepare a due diligence?
Yes, and it is one of the most direct uses of the report. It produces the mapping of flows entity by entity, the state of the processing agreements against article 28 of the GDPR, the map of vendors and their access, and a ranking of the gaps that an executive team can put in front of its board. The cabinet is an engineering practice, not a law firm: it produces the technical evidence, your counsel states the law.
What happens beyond three entities or ten sites?
The perimeter is costed separately, at the thirty-minute scoping call, which sets the order of work and the amount. The published price is not a ceiling, and pricing a four-entity group under the published figure would mean taking the difference out of the quality of the work.
Is the report usable without the cabinet afterwards?
Yes. It is handed over signed, in open formats, with no dependency on any tool of the cabinet, and every gap carries the measure that closes it priced on the published grid. Many clients have the work carried out elsewhere: that is a foreseen use, not a failure.