The Assurance Desk
What AvISO Consultancy offers, and what it publishes
AvISO Consultancy is mainly an ISO, SOC and TISAX certification consultancy. Its data protection officer service covers gap analyses, policy reviews, impact assessment advice and acting as your contact point with data subjects and the ICO. The firm says it holds ISO 27001:2022 and ISO 42001 itself, and was the first consultancy of its type to achieve ISO 42001.
AvISO Consultancy does not publish a price for its data protection work; its DPO page asks you to phone or use a contact form. It does not publish indemnity cover or any ICO case or outcome.
AvISO Consultancy sells its own ISOvA software alongside its advice and describes the two as a paired offering, with no statement separating what it recommends from what it sells. Of the 16+ consultants it names, two hold privacy or legal qualifications, one of them a solicitor, Eithne Gallagher. The rest are quality, health and safety or environmental auditors.
Strengths
- Holds ISO 27001:2022 and ISO 42001 (AI management systems) certification itself, and states it was the first consultancy of its type to achieve ISO 42001 certification
- One named team member (Eithne Gallagher) is a solicitor holding an EU GDPR Foundation and Practitioner certificate, giving at least one legally-qualified privacy resource
- Publishes a large, individually named consultant roster rather than an anonymous team
Things to check
- AvISO promotes its own ISOvA software platform alongside its consultancy advice without a separate independence disclosure
- Of the 16+ named consultants listed on the team page, only two hold data-protection-specific or legal qualifications; the rest are health, safety, quality and environmental lead auditors
- No pricing information is published for DPO or data protection advisory services
Common questions
Does AvISO specialise in data protection?
No. It is mainly an ISO, SOC and TISAX certification consultancy, and data protection officer work is one service among several.
Does AvISO publish its prices?
No. Its DPO page describes the work but gives no fees, rate card or examples, and asks you to phone or use a contact form.
Evidence for each AvISO Consultancy score
Show our working
Notes behind each thing to check
- AvISO promotes its own ISOvA software platform alongside its consultancy advice without a separate independence disclosure (The firm's own blog post 'Why AvISO Consultancy and ISOvA Software' describes the two as a paired offering, 'merging seasoned consultancy with state-of-the-art software')
- Of the 16+ named consultants listed on the team page, only two hold data-protection-specific or legal qualifications; the rest are health, safety, quality and environmental lead auditors (AvISO's own team page credentials each consultant, and the majority list NEBOSH/IOSH/ISO 9001/14001/45001 lead-auditor qualifications rather than privacy credentials)
- No pricing information is published for DPO or data protection advisory services (The DPO service page describes scope of work but no fees, rate card or pricing examples)
| Criterion | Score | Evidence |
|---|---|---|
| Help when things go wrong | The DPO service states the firm will act as an ICO contact point, but no documented ICO engagement, breach case or outcome is published | |
| Qualifications of the people who do the work | The team page names credentials for 16+ staff, but only two hold privacy/legal-specific qualifications; the rest are quality/H&S/environmental auditors, so privacy expertise is not firm-wide | |
| What it publishes about fees | No fee figures or rate card are published anywhere on the DPO or data protection pages checked | |
| Knowledge of your sector | Dedicated sector pages exist for professional services and the security sector, but sector content is thin relative to the firm's core ISO-generalist positioning | |
| Independence from what it sells | The firm's own blog post markets its ISOvA software as paired with consultancy advice, without a stated separation between advisory recommendations and its own product | |
| Who carries the risk if the advice is wrong | No professional indemnity insurance or liability terms are disclosed on the pages reviewed |
Sources for AvISO Consultancy
- Companies House registration (AVISO CONSULTANCY LTD, company number 08246476, active, incorporated 9 October 2012, registered office 198 High Street, Tonbridge, Kent TN9 1BE) (Companies House, checked 17 July 2026)
- DPO service scope (Gap analyses, policy/procedure review, DPIA advice, and acting as a contact point for data subjects and the ICO) (avisoconsultancy.co.uk, checked 17 July 2026)
- Pricing disclosure (No prices or fee ranges published; site directs enquiries to phone or contact-form channels) (avisoconsultancy.co.uk, checked 17 July 2026)
- Team credentials (Team page names 16+ consultants; only two hold privacy-specific or legal credentials (a solicitor with an EU GDPR Foundation/Practitioner certificate, and an LLB-qualified consultant specialising in data protection), the remainder hold quality/health-and-safety/environmental lead-auditor qualifications) (avisoconsultancy.co.uk, checked 17 July 2026)
- Own software product paired with advice (AvISO markets its consultancy as paired with its own ISOvA cloud software platform for clients) (avisoconsultancy.co.uk, checked 17 July 2026)
ISO 9001:2015 ISO 14001:2015 ISO 27001:2022 ISO 42001 Cyber Essentials BSI Platinum Member
Seeking ISO 42001 certificationRegulated sectorsFirst DPO or AI policyExposed to the EU AI Act
Where this firm appears
- Do you need a data protection officer?
- Can the firm that prepares you also certify you?
- Does the EU AI Act apply to a UK firm?
- Your sector adds its own rules to UK data protection law
- Compare providers
If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.
This is an independent editorial guide, not legal advice.