Data protection & GDPR compliance GDPR compliance: audit, outsourced DPO, register and documentation
We support SMEs and mid-market companies with GDPR compliance: data processing audit, appointment of an outsourced DPO, processing register setup and privacy policy drafting. Tailored support, plain language, adapted to your reality.
What you get
At the end of compliance work
Your organisation is GDPR compliant, your processing is documented, your teams are trained and you have a lead DPO — ready for a GDPR inspection.
4% of global turnover: maximum GDPR fine — support costs 100x less
Our GDPR compliance services
GDPR audit
Complete compliance assessment: processing mapping, gap analysis and prioritised action plan.
Outsourced DPO
Shared Data Protection Officer, registered with the CNIL and available from €290/month.
Processing register
Setup and maintenance of GDPR Article 30 register: complete mapping of your personal data.
Privacy policy
Tailored drafting of your privacy policy, legal notices and GDPR cookie policy.
Scope of the project
What your GDPR compliance includes
Sustainable GDPR compliance covers far more than a privacy policy — here are all the areas we address.
Data processing audit
Inventory and mapping of all personal data processing activities
GDPR gap analysis
Analysis of gaps between your current situation and regulatory requirements
Article 30 processing register
Creation and setup of a register compliant with CNIL requirements
DPO appointment
Official appointment of the Data Protection Officer with the CNIL
Complete GDPR documentation
Privacy policy, legal notices, cookie policy and consent templates
Team awareness
Training employees on GDPR best practices and personal data management
Rights exercise procedures
Setup of processes to respond to access, rectification and erasure requests
Ongoing regulatory monitoring
Monitoring GDPR developments, CNIL guidelines and EDPB decisions
Our pricing
How much does GDPR compliance cost?
Cost depends on company size, number of processing activities and initial GDPR maturity. A precise quote is provided within 48h.
Initial GDPR Compliance Pack
€2,900 – 4,900 excl. VAT
Micro-business / SME up to 20 employees
- Processing audit
- GDPR gap analysis
- Processing register
- Privacy policy
- Prioritised action plan
Full Compliance Pack
€5,900 – 9,900 excl. VAT
SME 20 to 150 employees
- GDPR audit complet
- Processing register complet
- Complete GDPR documentation
- Team awareness (half day)
- Rights exercise procedures
- Suivi 3 months inclus
Annual GDPR support
€1,200 – 2,400 excl. VAT / year
Ongoing maintenance of your compliance
- Register updates
- GDPR regulatory monitoring
- Annual document review
- GDPR hotline (ad hoc questions)
- Annual compliance report
Indicative pricing — a personalised quote is provided within 48h based on your exact scope.
How long does GDPR compliance take?
Full GDPR compliance typically takes 2 to 4 months depending on company size, number of data processing activities and initial maturity. A GDPR audit beforehand helps estimate workload precisely and prioritise actions.
Is GDPR compliance mandatory for SMEs?
Yes, GDPR applies to every organisation — regardless of size — that processes personal data of EU residents. This includes micro-businesses, SMEs, associations and public bodies. Non-compliance exposes you to fines of up to 4% of global turnover or €20 million.
What is an outsourced DPO?
The outsourced DPO (Data Protection Officer) is a shared GDPR expert who fulfils the legal DPO role without recruitment costs. Registered with the CNIL, they maintain your register, handle rights requests and provide ongoing regulatory monitoring — from €290/month.
What are GDPR sanctions?
GDPR sanctions can reach €20 million or 4% of annual global turnover (whichever is higher). The CNIL also issues formal notices and warnings and can order suspension of processing. In 2023, the CNIL issued 42 formal notices and 42 financial penalties.
Ready to make your business GDPR compliant?
Our GDPR experts assess your situation and deliver an action plan within 48h. First conversation free, no commitment.