FAQ
10 questions
Yes. We use a standard import template, with some flexibility for how your existing records are laid out. Our team can handle the import as part of onboarding, or you can do it yourself if you prefer. Vendors, risks and other inventories can be brought across the same way.
Not through an open self-serve trial. After a short demo we can set up access to a working environment. Before we do, we'll ask about your goals and priorities for the year ahead, so we can seed the environment with the templates and content that will be useful to you, not a generic setup.
CultureLens asks employees directly how they understand and handle privacy in their day-to-day work, which shows you where training is needed. Results map to the same maturity framework as your programme assessment, so you can see gaps from both the programme side and the people side. It's available alongside the platform as a separate subscription.
We aim to have your ROPA live in the platform, with Visual ROPA View (Estate View), within 30 days. The main things that affect timing are having your existing records to hand and a named contact on your side who can answer questions as we go.
Pricing is based on headcount and covers all modules on a 12-month agreement. It starts at £800 per month for organisations with up to 2,500 employees, and £1,600 per month for 2,501 to 5,000. For larger organisations, groups with several entities, or if you'd like our Privacy Operations team working alongside you, we'll put together a quote. Prices exclude VAT.
Yes. Whether the driver is cost, complexity or both, we'll scope the migration with you, bring your records across and agree a realistic go-live date up front.
Our Privacy Operations team is made up of experienced privacy practitioners. They can advise when you need a second opinion, or take on work when your team is stretched, such as DPIAs, DSAR handling and vendor reviews. This is arranged separately from your subscription, so you only use it when you need it.
Tasks, ROPA, Incidents, Vendors, Operational Assessments and Risks, all in one subscription. There are no premium tiers or add-ons to unlock later.
They come together because privacy work doesn't sit in separate boxes. A vendor is linked to the processing it supports, an incident shows which activities and vendors it touches, and a risk ties back to where it came from. If the modules were split up you'd lose those connections, and the connections are where most of the value is. It also keeps pricing simple.
Privacy Culture holds Cyber Essentials certification, and the platform is independently penetration tested. Our security collateral, including our standard DPA, is on the Trust & Security page, with no form to fill in.
It's for the people responsible for privacy in a busy organisation: DPOs, privacy managers and compliance leads, often working with a small team or with privacy as one part of a wider role. If your ROPA lives in spreadsheets, assessments get chased over email, and it's hard to show leadership where you really stand, this is for you.
What changes is that you get one connected view of your processing, vendors and risks. Assessments move faster because the right people complete them directly, and you have evidence you can put in front of your board or a regulator. Whether you're building a programme from scratch or tightening up an established one, we start from your current maturity and agree a plan from there.