Privacy operations & supplier assurance
Understand where important data goes, and what evidence supports supplier decisions.
Every security questionnaire starts from a blank page.
We don't know which supplier could leak our customer data.
Data protection law: do we need to do anything?
For operations, compliance and sales teams selling to larger customers.
We map where your sensitive data lives and goes, review the suppliers that matter, and build a reusable answer bank so customer questionnaires take days instead of weeks. Legal interpretation is referred to qualified counsel.
Scope boundary
We are not a law firm. Which PDPA obligations apply to you depends on current Gazette commencement orders, so we check them for each client and refer legal conclusions to qualified counsel.
- Data inventory and vendor register
- Proportionate supplier reviews with open actions tracked
- Evidence-backed answers to customer questionnaires
- Privacy action plan aligned to Sri Lanka's Personal Data Protection Act
Per questionnaire · retainer from LKR 50,000 / month. Excludes tax, licences and third-party fees; scope confirmed in writing before work begins.
Often paired with
Start with the Health Check
Tell us which system your business can least afford to lose, or which customer review is coming up. We'll scope a fixed-fee check around it and send a one-page proposal within two working days.