AI Ethics & GDPR Compliance
We establish the data protection position on your AI plans before anything is built, and provide the documentation your DPO and auditors will need. Settling this early keeps implementation straightforward and gives your board confidence in the decision.
Pricing from
Overview
Most AI compliance work comes down to a handful of practical questions. What is your lawful basis for processing personal data through a model. What are the people affected told. Is any decision about an individual being made automatically, and how can they query it. Where does the data physically reside.
We work through those with you during planning and produce the documentation your DPO or auditor will ask for. That typically covers a data protection impact assessment where one is required, a record of processing activities and transparency wording for the people affected, all prepared so your team can act on it directly.
This sits alongside our other AI work rather than replacing it. Where the conclusion is that your data needs to stay within your own control, our private AI deployment service delivers that. Where you would like the compliance position built into a broader plan, it forms part of our AI consultancy engagement.
What’s included
GDPR Settled During Planning
Lawful basis, transparency, automated decision-making and impact assessments settled during planning, which keeps your implementation straightforward and your records complete.
Fairness Testing and Monitoring
Where a model informs decisions about people, we test the outputs across groups and put monitoring in place so you have ongoing assurance.
Sector-Specific Requirements
Healthcare, legal services, financial institutions and public sector suppliers each work to different rules. We prepare to the ones that apply to you.
Documentation Your Team Can Use
You receive impact assessments, processing records and transparency wording written clearly enough for your DPO, your auditors and your board to work from.
How we deliver
Our AI Ethics & GDPR Compliance Process
Step 1: Establish the Position
We establish what data your use case involves, whose it is and what your regulator and contracts require, which is usually quicker than clients expect.
Step 2: Agree the Framework
Lawful basis, transparency, retention, access control and human oversight are agreed and recorded before development begins.
Step 3: Prepare the Documentation
We prepare the impact assessment, processing records and transparency wording, written for your DPO, your auditors and your board.
Step 4: Confirm the Conditions
You receive a clear set of conditions the implementation needs to meet, so your build team knows exactly what they are working to.
On this page
Client work
What this looks like in practice
We use AI in our own GDPR compliance reviews for clients. Document packs, processing records and draft impact assessments can be prepared and updated much faster than doing the same work by hand, and reviews can be scheduled so documentation stays current as a use case changes. The judgement still sits with us and with your DPO or legal advisers. The gain is speed and consistency on the first draft and the refresh cycle, not replacing the people who sign off the position.
Pricing from
Questions
AI Ethics & GDPR Compliance FAQs
What does a compliance review cost?
A review of a planned use case starts at £675, which represents around a day of work including the written documentation. Where you are already engaging us for consultancy or a build, this forms part of that work at no additional cost.
Does using AI always involve GDPR?
Where personal data is processed, yes. That covers customer records, employee information and anything identifying an individual. Where the model works only with anonymised or operational data, the position is considerably more straightforward.
What is your role relative to our legal advisers?
We are technologists who work within data protection requirements and prepare documentation your legal advisers can review. For contentious or high-risk processing you will want a solicitor alongside us, and we will tell you when that point is reached.
What happens if a use case needs adjusting?
We set out what would need to change for it to work, and give you the alternatives that achieve a similar outcome within your requirements. Establishing this at the planning stage is exactly why the review is worth doing.
What documentation do we receive?
Typically an impact assessment where required, a record of processing activities, transparency wording for the people affected and a summary of what was tested and agreed, written so someone who was not involved can follow it.
Latest news
Claude Fable 5: What Anthropic’s New AI Model Means for Your Business
The Best AI Models so far in 2026
