# Data GRC Ltd - **Type:** Advisory firm - **Website:** https://www.datagrc.co.uk/ - **Assessed by:** The Assurance Desk (Add-Venture Advisory Ltd) A UK data protection and information security consultancy offering outsourced DPO and CISO services, GDPR advice, audit and training, with a fixed price for short advice calls. ## Data GRC scores Scored 1 to 5 on six criteria. There is no overall score. ### Help when things go wrong: 2/5 Only a 'data breach response training' course was found; no case-level ICO liaison or breach-response service description with named staff or outcomes appears on the services page (datagrc.co.uk/services/). ### Qualifications of the people who do the work: 1/5 No named staff or individual qualifications are published on the homepage, services page, or 'More Information' page checked (datagrc.co.uk/more-information/). ### What it publishes about fees: 3/5 A fixed £175+VAT price is published for a single advisory call, but no rate card or figures exist for ongoing DPO/CISO retainer services (datagrc.co.uk/). ### Knowledge of your sector: 3/5 Training tracks are offered for HR, Marketing and Charity sectors, but no named sector specialists or dedicated sector case studies were found (datagrc.co.uk/services/). ### Independence from what it sells: 3/5 No commercial software product or independence disclosure statement was found on the pages checked, leaving the firm's product relationships unclear either way (datagrc.co.uk/services/). ### Who carries the risk if the advice is wrong: 1/5 No professional indemnity insurance or liability terms are disclosed on any page checked (datagrc.co.uk/more-information/, datagrc.co.uk/services/). ## Sources for Data GRC Every line carries the page it was read on and the date it was checked. - Registered at Companies House as Data GRC Ltd - Source: https://find-and-update.company-information.service.gov.uk/company/10892418 - Checked: 2026-07-17 - No firm-level ICO registration number found published - Source: https://datagrc.co.uk/more-information/ - Checked: 2026-07-17 - Publishes six core service lines - Source: https://datagrc.co.uk/services/ - Checked: 2026-07-17 - Publishes a fixed price for ad hoc advisory calls, but not for ongoing DPO/CISO retainer services - Source: https://www.datagrc.co.uk/ - Checked: 2026-07-17 - No named staff or individual credentials found published - Source: https://datagrc.co.uk/more-information/ - Checked: 2026-07-17 ## What this provider publishes Not published means we did not find it on the firm's own pages. - Price: Published - Indemnity cover: Not published - Credentials: Not published - Independent accreditation: Not published - Client results: Not published - How it uses AI: Not published ## Strengths - Publishes a fixed, transparent price (£175 + VAT) for ad hoc 30-minute advisory calls, a level of pricing transparency not found on the other four sites reviewed - Combines DPO advisory with an outsourced CISO offering, covering both data protection and information security governance - Offers structured GDPR training tracks tailored to specific functions, including HR, Marketing and Charities ## Things to check Each one carries the factual basis it rests on. - No named staff, individual credentials, or firm accreditations found published on the site - Basis: The homepage, services page and 'More Information' page were checked and none lists named consultants, their qualifications, or firm-level accreditations (datagrc.co.uk/more-information/, checked 2026-07-17). - No professional indemnity insurance or ICO registration number disclosed - Basis: Neither was found on the pages checked (datagrc.co.uk/more-information/, datagrc.co.uk/services/, checked 2026-07-17). - Only ad hoc advisory-call pricing is published; ongoing DPO/CISO retainer pricing is not disclosed - Basis: The published £175+VAT figure applies to a single 30-minute call only; no rate card for outsourced DPO or CISO retainers was found (datagrc.co.uk/, checked 2026-07-17). ## Where this firm appears - [Do you need a data protection officer?](https://theassurancedesk.com/best/first-appointment) - [Can the firm that prepares you also certify you?](https://theassurancedesk.com/best/certification-seeking) - [After a data breach: what UK law asks of you](https://theassurancedesk.com/best/post-breach) - [Which data protection, AI governance and cyber security providers publish a price?](https://theassurancedesk.com/lists/providers-that-publish-a-price) - [Compare providers](https://theassurancedesk.com/compare) --- **Scope.** The Assurance Desk covers data protection, AI governance and cyber security in the United Kingdom and the United States. It scores providers in both: UK-facing firms, and firms based in the United States. Every provider scored so far was selected for data-protection, AI-governance or security-assurance work. Where a page describes law, it names the country that law applies in. **Who publishes this.** The Assurance Desk is published by Add-Venture Advisory Ltd, company number 11854524, registered in England and Wales. The same owner runs Avouch, a marketing agency that sells AI visibility services to firms of the kind this site covers. That is a conflict of interest, and it is disclosed here. **Corrections.** If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.