Services
Protecting information is an ongoing journey, not a one-off project. We take it with you: we find out what matters most, fix it and make sure things stay in order.
Information security
Concrete, manageable security, from assessing where you stand to an ongoing partnership.
A clear overall picture of your company's information security: strengths and areas for improvement. Done to suit your goals, as a light review of the current state or in depth against the requirements of the NIS2 directive or the ISO/IEC 27001 standard.
Reveals what your company shows to the outside world and how an attacker could use it. Done with open-source intelligence methods (OSINT), including a dark web search for leaked credentials.
Takes care of leading, maintaining and developing information security without hiring a new person. Clear responsibility for security, requirements met and practices up to date.
Flexible expert help for individual needs without a long-term commitment, for example for risk assessment, developing practices or solving a specific problem.
Strengthens staff skills and reduces human error, the most common security threat for businesses. As general training, by theme or tailored, once or regularly.
Data protection
Data protection is about trust. We help you process personal data lawfully and transparently.
An overall picture of how personal data is processed today and how well GDPR requirements are met. We go through key processes, documents and responsibilities, identify gaps and give concrete actions.
Ongoing expert support for processing personal data, GDPR requirements and everyday data protection questions. Reduces the administrative load and brings clear responsibility without hiring your own expert.
Fast, flexible help with processing personal data, GDPR requirements or individual data protection questions. Suitable for well-defined assignments.
Clear ways of working to understand and follow GDPR in everyday work, so that personal data is processed lawfully and securely. Once or regularly.
AI
ChatGPT, Copilot and other AI tools are already part of everyday work. We help you use them productively so that customer data and trade secrets do not leak and the obligations of the EU AI Act are met.
We find out what AI is used in your company (including "in secret"), which risk class the use falls into and what the EU AI Act requires of you as a user or provider. The result is an AI register and a clear list of actions.
Written rules for staff: which tools may be used, what data may be entered into them and how results are checked. Includes the data protection (GDPR) and security perspectives as well as tool settings.
An AI management system (AIMS) according to the standard: current state assessment, risk and impact assessment, roles and documentation. Built on existing ISO/IEC 27001 work where possible, so nothing is done twice.
The EU AI Act requires staff who use AI to understand its opportunities and risks. Practical training: protecting data, AI scams and deepfakes, checking results. You get a certificate of attendance.
Does the AI service handle personal data? We carry out a data protection impact assessment (DPIA), review the supplier’s terms, where the data is kept and whether the supplier trains its model on your data, and update the data processing agreements and the privacy notice.
Copilot sees everything the user has access to. Before rollout we review over-broad sharing and permissions, sensitivity labels and settings, so Copilot does not surface confidential information to the wrong people.
Building a chatbot or an AI agent? We test it against prompt injection, data leaks, excessive permissions and misuse, based on the OWASP list of risks for LLM applications, and suggest the fixes.
Packages
We have put the most common needs of SMEs into clear packages, from Security Start to the monthly Security Partner.
Tell us what is on your mind and we will listen. The first call is free and you are not committing to anything. At worst you get a few good tips, at best a partner who takes care of your company's security.