Data Protection
Legal advice, representation and compliance, from the GDPR to the revised Swiss FADP.
UK Representative- EU Representative
- Data Protection Advisor (Switzerland)
- Data Protection Officer (EU)
- Data Protection Workshop (SME)
Startup
SME
Enterprise
Data protection & ISO 27001 without hiring in-house, your outsourced DPO & ISO.
Lawyers + technical experts. Audit-ready in 90 days. FADP · GDPR · ISO 27001 · DORA · NIS 2.
Dr. iur.
LL.M.
Attorney at Law (NY)
Solicitor (UK)
Aviation
Pharma
Banking
HealthTech
HR
SaaS
Cloud
Our services
Data Protection & Information Security
Two disciplines, one goal: legally sound and technically robust compliance, under one roof.
Information Security
Audits, protective measures and ISMS implementation, from vulnerability scans to ISO 27001 certification.
- Vulnerability Scan
- Penetration test
- IT Security Workshop (SME)
- ISMS (ISO 27001) Consulting
- CISO / ISO / ISM
Tool-supported implementation with the Priverion Platform
The Priverion platform brings together data protection, information security and risk management in a single Swiss SaaS solution. You document your processing activities, manage risks and controls, and respond to incidents, across all companies in your group, in a shared language.
24 modules, one price
From records of processing activities (ROPA) through DPIA and risk register to vendor management, all modules included, with no per-user licences.
AI & Model Context Protocol
Query your compliance data directly through any MCP-capable AI agent, fully protected by permissions.
Group-wide compliance
A single, central documentation for all companies: share templates, roll out updates and manage intra-group data transfers.
Swiss-hosted infrastructure
Operated on a managed Kubernetes environment in Switzerland, data sovereignty from day one.
24
Modules at no extra cost
3
Standards: GDPR · FADP · ISO 27001
CH
Hosting & data sovereignty
OUR LATEST ‘INSIGHTS’
kunstliche-intelligenz
EU AI Act for Medical AI, Your Healthcare Action Plan
A practical action plan for the EU AI Act and medical AI: which systems are high-risk, how the AI Act dovetails with MDR/IVDR, and why an inventory and classification now matter more than any deadline.
infosec
The 24-Hour Reporting Duty for Hospitals, ISG/BACS in Practice
What a hospital must report, how the clock runs, what BACS expects, including a reporting workflow to rehearse in a tabletop and the distinction from NIS2.
kunstliche-intelligenz
The EU AI Act for B2B SaaS With AI Features: What to Classify Now
What the EU AI Act means for B2B SaaS providers shipping AI features: transparency duties for most, high-risk for some, GPAI duties for model providers, the provider vs deployer split, and how it interlocks with your DPA and the vendor security review.
No matching results were found.
client testimonials
Our Team
Lawyers and engineers under one roof. Direct line to the founder, no account-manager layer in between.
