Audit GDPR
and environmental audit
We assess data protection and environmental compliance, with a remediation plan on realistic deadlines.
Financial auditorCAFREnvironmental auditorNational RegisterPublic procurement expertAccredited training
GDPR audit
Processing inventoryIncluded
Legal groundsChecked
Processor agreementsChecked
OutcomeCompliance plan
Environmental audit
PermitsChecked
ReportsChecked
Packaging and wasteChecked
OutcomeCompliance plan
Who needsthis service.
- Companies processing personal dataPractically any company with employees, customers or suppliers who are individuals.
- Companies with environmental obligationsPermits, reporting, packaging and waste.
- Companies in a sale processBuyers check both areas during due diligence.
- Companies after an incidentA security incident or a complaint usually brings an inspection.
What you receiveat the end of the engagement.
- Assessment reportWhat is compliant, what is not, and at what risk.
- Processing inventoryWhat data you collect, on what basis, and how long you keep it.
- Compliance planConcrete measures, each with an owner and a deadline.
Frequently asked questionsabout GDPR and environmental audit.
Does every company need a GDPR audit?
Any company processing personal data has obligations, and that covers practically any company with employees or individual customers. The scope of the audit does vary considerably with the volume and sensitivity of the data.
What does an environmental audit involve?
We check whether the company holds the necessary permits, whether reports were filed on time, and whether packaging and waste records are complete. The output is a compliance plan with deadlines.
How long does it take?
For a small or medium company, each of the two assessments takes roughly two to four weeks.