The Assurance Desk
What CyPro offers, and what it publishes
You get two named founders with published credentials. The firm says Jonny Pelter holds CISSP, CISM, CISA, CRISC, CIPP/E and CIPM and worked at KPMG, Deloitte, NCSC and GCHQ, and that Rob McBride holds CISSP and CISM. Its team includes a named Data Protection Lawyer and a named Virtual DPO. Case studies name clients, including the University of Southampton.
CyPro does not publish a price. The services page says it delivers services 'at a fraction of the cost' but gives no figures and sends you to a contact form. It does not publish its professional indemnity cover or liability terms.
CyPro has a short trading history. Companies House shows it was incorporated on 15 December 2022, and its own site says it was founded in 2024. For ISO 27001, the firm says an outside accredited certification body does the final audit. We found no software of its own on sale.
Strengths
- Co-founders are individually named with specific, verifiable professional credentials (CISSP, CISM, CISA, CRISC, CIPP/E, CIPM) and stated prior roles at Deloitte, KPMG, NCSC and GCHQ
- Named data-protection-specific staff include a qualified Data Protection Lawyer and a Virtual DPO, not just generalist security consultants
- Publishes named client case studies, such as the University of Southampton achieving ISO 27001 and Cyber Essentials Plus, rather than only anonymous testimonials
Things to check
- No pricing information is published; the site only makes a general 'fraction of the cost' claim without figures
- No professional indemnity insurance or liability terms are disclosed on the pages reviewed
- The company was only incorporated in December 2022 and states it was founded in 2024, giving a short trading history to evaluate
Common questions
Does CyPro publish its fees?
No. Its services page gives no rate card or fee figures and sends enquiries to a contact form.
Who founded CyPro?
Jonny Pelter and Rob McBride, according to its own site. The firm says Pelter holds CISSP, CISM, CISA, CRISC, CIPP/E and CIPM, and McBride holds CISSP and CISM. Both list past work at Deloitte.
How long has CyPro been trading?
Not long. Companies House shows it was incorporated on 15 December 2022. The firm's own site says it was founded in 2024.
Evidence for each CyPro score
Show our working
Notes behind each thing to check
- No pricing information is published; the site only makes a general 'fraction of the cost' claim without figures (The services page markets cost-effectiveness rhetorically but does not publish a rate card, fee range or worked example)
- No professional indemnity insurance or liability terms are disclosed on the pages reviewed (No PI insurer, cover level or liability commitment was found on the services, about or contact pages)
- The company was only incorporated in December 2022 and states it was founded in 2024, giving a short trading history to evaluate (Companies House lists CYPRO CONSULTING LTD's incorporation date as 15 December 2022, and the firm's own site states it was founded in 2024)
| Criterion | Score | Evidence |
|---|---|---|
| Help when things go wrong | The GDPR Gap Analysis is a clearly documented six-step process with named DP-specific staff (a Data Protection Lawyer and a Virtual DPO), but no disclosed regulator engagement or breach-outcome case study was found | |
| Qualifications of the people who do the work | Both named co-founders publish specific, verifiable IAPP and security credentials (CIPP/E, CIPM, CISSP, CISM, CISA, CRISC) and a named Data Protection Lawyer sits on the team | |
| What it publishes about fees | No fee figures, rate card or pricing examples are published anywhere on the services or contact pages checked | |
| Knowledge of your sector | Published case studies name real clients across fintech, higher education, travel and adtech, showing tailored sector work rather than one templated process | |
| Independence from what it sells | CyPro's ISO 27001 service explicitly partners with an external accredited certification body for the final audit rather than certifying its own advisory work, and no proprietary software product is sold alongside the advice | |
| Who carries the risk if the advice is wrong | No professional indemnity insurance, cover level or liability terms are disclosed on the pages reviewed |
Sources for CyPro
- Companies House registration (CYPRO CONSULTING LTD, company number 14543659, active, incorporated 15 December 2022, registered office Level 39, One Canada Square, Canary Wharf, London E14 5AB) (Companies House, checked 17 July 2026)
- GDPR Gap Analysis service scope (Six-step process: stakeholder engagement, scope identification, documentation review (RoPA, privacy notices), workshops with data/process owners, risk-rated findings, and a tailored compliance roadmap) (cypro.co.uk, checked 17 July 2026)
- Founder credentials (Co-founder Jonny Pelter is named with CISSP, CISM, CISA, CRISC, CIPP/E and CIPM credentials and prior KPMG/Deloitte/NCSC/GCHQ experience; co-founder Rob McBride is named with CISSP and CISM credentials and prior Deloitte and UK government advisory experience) (cypro.co.uk, checked 17 July 2026)
- Pricing disclosure (No prices or rate card published; site states services are delivered 'at a fraction of the cost' without figures, and directs enquiries to a contact form) (cypro.co.uk, checked 17 July 2026)
- Regulator reference in privacy policy (CyPro's privacy policy names the ICO as the relevant UK supervisory authority for breach reporting but does not state a specific ICO registration number) (cypro.co.uk, checked 17 July 2026)
First DPO or AI policySeeking ISO 42001 certificationRegulated sectors
Where this firm appears
- Do you need a data protection officer?
- Can the firm that prepares you also certify you?
- Your sector adds its own rules to UK data protection law
- Compare providers
If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.
This is an independent editorial guide, not legal advice.