Data protection and information security
Compliance that works inside your processes, not just in a binder
We act as your Data Protection Officer, run GDPR audits and assess cloud deployments against the DORA Regulation. Our advice accounts for how your business actually operates.
12
years in data protection, 8 of them under the GDPR
300+
audit projects, from a single entity to a capital group
1200+
incidents and breaches assessed since 2018
PLN 5m
professional indemnity insurance cover
ISO
our 27001 and 9001 certificates – information security and service quality sample data
20k+
processing authorisations held in the registers we maintain
Check in a minute
What a fine could cost your organisation
We calculate using EDPB guidelines 04/2022 – the same method as in our audit reports. No e-mail address required and the result appears straight away.
What we do
Six main areas where we support organisations
Data Protection Officer
We take over the DPO role in full. Beyond answering queries, we maintain the records, train your teams and handle incidents.
See the scope
GDPR audits
A review of your processing activities, based on a methodology refined across several hundred audit projects.
How an audit works
Cloud computing audits
Preparing financial entities for the requirements of the DORA Regulation.
DORA requirements
NIS2 and cybersecurity
Establishing whether the directive applies to you, a gap analysis, and implementation of risk management measures.
Artificial intelligence and the AI Act
An inventory of AI use across your organisation, risk classification, and usage rules that hold up under the GDPR.
Training
Programmes built around your own processes, delivered on site, online or as e-learning.
Browse topics
Why AURACO
Four things that set us apart from a law firm
Every project is seen by both a GDPR-specialised legal counsel and an ISO 27001 lead auditor.
Law and engineering on one team
We audit with mixed teams, so recommendations are both legally sound and operationally workable.
Practice over theory
Twelve years in data protection lets us read the rules even where case law and regulator guidance are still thin.
Our eAURA platform, included
Processing records, authorisation registers and an incident log in one place. No separate licence fee.
Liability backed by insurance
Professional indemnity cover stands at PLN 5,000,000. Real protection, not a clause buried in the contract.
Included with your retainer
eAURA: documentation that holds together
We built our own platform because spreadsheets fall apart after the first audit. Processing records, authorisation registers and the incident log live in one place, linked to each other.
Clients on a DPO retainer get access at no extra licence cost.
Processing records
Article 30 GDPR without copying between files.
Authorisation register
Who has access to what, and since when.
Incident log
With notification deadlines calculated automatically.
Fine estimation
EDPB 04/2022 methodology, the same one behind our public calculator.
Privacy notice service
The second tool we give clients: our own privacy notice service with versioning, change history and PDF export, published under your own subdomain.
About this service
Knowledge assistant built on our own library
It answers questions from legislation, commentary and regulators’ guidance, always citing the source. Our team maintains the library. Available to clients on a retainer.
About this tool
Not sure where to start?
A short call is usually enough to size up what you need and what deserves attention first.