We count visits with Google Analytics cookies and Vercel Web Analytics to see which pages help readers most.

Cookie settings
The Assurance Desk
The DPO Centre logo

The DPO Centre review

Advisory firm

A UK outsourced DPO firm with roughly 100+ named staff and an AI governance line alongside its GDPR work, owned by Axiom GRC since September 2025.

Relevant if you are appointing a first DPO and want named, qualified people and sector case studies

Price Not published
Indemnity cover Not published
How it uses AI Published
Facts last checked

Not published means we did not find it on the firm's own pages.

The DPO Centre scores

Six scores, each 1 to 5. The evidence for each is further down.

Help when things go wrong 3/5
Qualifications of the people who do the work 5/5
What it publishes about fees 3/5
Knowledge of your sector 4/5
Independence from what it sells 4/5
Who carries the risk if the advice is wrong 2/5

What The DPO Centre offers, and what it publishes

You get named, qualified people. Its team page lists roughly 100+ staff with credentials such as CIPP/E, CIPM, AIGP and legal qualifications, and it publishes 67 case studies naming clients, including Mazda UK, AlRayan Bank and an NHS foundation trust. Alongside its DPO work, it offers Outsourced AI Officers, AI Impact Assessments and an EU AI Act readiness assessment.

The DPO Centre does not publish a price. Its outsourced DPO page says pricing 'depends on the complexity of your data landscape' and gives no figures, day rates or worked examples. It does not publish professional indemnity cover or liability terms. Its footer shows accreditation logos without certificate details.

The DPO Centre's About page says Axiom GRC, a governance and compliance group, acquired it on 1 September 2025. Ask how that affects your service. Its privacy notice says it uses AI for recommendations built from aggregated customer data and Microsoft Copilot to transcribe Teams calls. Its Trustpilot profile is unclaimed, with one review about a recruitment experience, not client service.

Strengths

  • Publishes one of the most detailed team-credentials pages in the sector: ~100+ named staff with per-person CIPP/E, CIPM, CIPT, AIGP, FIP and legal qualifications
  • 67 named client case studies across sectors including NHS trusts, finance and consumer brands
  • Distinct AI-governance service line: Outsourced AI Officer, AI Impact Assessment and EU AI Act Readiness Assessment pages
  • Discloses its own AI use (recommendation insights and Microsoft Copilot call transcription) in its privacy notice

Things to check

  • No prices, day rates or worked examples are published; costing requires enquiry.
  • Does not publish professional-indemnity cover or engagement liability terms on its public website.
  • Its own independent certifications (e.g. ISO 27001) and certifying bodies are not set out in a verifiable register on the site.
  • Now part of the Axiom GRC group rather than an independent standalone firm; buyers may wish to ask how group ownership affects service.

Common questions

Does The DPO Centre publish its prices?

No. Its outsourced DPO page says pricing depends on the complexity of your data landscape and that you pay only for the DPO time you use. It gives no figures, day rates or worked examples.

Can The DPO Centre help with the EU AI Act?

Yes, up to a point. It offers an EU AI Act readiness assessment, Outsourced AI Officers and AI Impact Assessments. The readiness page says it does not act as EU AI Representative, run conformity assessments or give formal sign-off.

Are its consultants qualified?

Its team page says so. It names staff with individual credentials, including CIPP/E, CIPM, CIPT, AIGP, FIP and legal qualifications.

Evidence for each The DPO Centre score

Show our working

Notes behind each thing to check

  • No prices, day rates or worked examples are published; costing requires enquiry. (Outsourced DPO page states pricing 'depends on the complexity of your data landscape' with no figures (dpocentre.com/services/outsourced-dpo-services/, 2026-07-16))
  • Does not publish professional-indemnity cover or engagement liability terms on its public website. (No PI or liability disclosure found on service or contact pages checked 2026-07-16 (dpocentre.com/services/outsourced-dpo-services/))
  • Its own independent certifications (e.g. ISO 27001) and certifying bodies are not set out in a verifiable register on the site. (Footer accreditation logos are displayed without certificate details on pages checked 2026-07-16 (dpocentre.com/contact-us/))
  • Now part of the Axiom GRC group rather than an independent standalone firm; buyers may wish to ask how group ownership affects service. (About page states acquisition by Axiom GRC on 1 September 2025 (dpocentre.com/about-us/, 2026-07-16))
Six criteria, each scored 1 to 5, with the evidence for each.
CriterionScoreEvidence
Help when things go wrong 3/5 Outsourced DPO page describes cooperating with regulators including the ICO on clients' behalf, but publishes no engagement outcomes (dpocentre.com/services/outsourced-dpo-services/, 2026-07-16)
Qualifications of the people who do the work 5/5 ~100+ named practitioners with per-person CIPP/E, CIPM, CIPT, AIGP, FIP and legal qualifications published (dpocentre.com/about-us/our-team/, 2026-07-16)
What it publishes about fees 3/5 Fractional, pay-for-time model explained but no figures or worked examples published (dpocentre.com/services/outsourced-dpo-services/, 2026-07-16)
Knowledge of your sector 4/5 Sector pages plus sector-specific services (NHS DSPT audits, Caldicott Guardian, life sciences) and 67 named sector case studies (dpocentre.com/services/, /case-studies/, 2026-07-16)
Independence from what it sells 4/5 Advice-only model with no software product to sell; Axiom GRC group ownership is disclosed on the about page (dpocentre.com/about-us/, 2026-07-16)
Who carries the risk if the advice is wrong 2/5 Regulator-cooperation and breach support commitments described in service copy, but no PI cover or liability terms published as of 2026-07-16 (dpocentre.com/services/outsourced-dpo-services/)

Sources for The DPO Centre

  • Companies House registration: THE DPO CENTRE LTD, company number 10874595, incorporated 19 July 2017, status Active, registered office 20 Grosvenor Place, London SW1X 7HN (Companies House, checked 16 July 2026)
  • Service scope: Outsourced and interim DPO services, EU & UK GDPR representation, DSAR response, data protection consultancy and training, plus AI-governance services including Outsourced AI Officers, AI Impact Assessments and an EU AI Act Readiness Assessment (dpocentre.com, checked 16 July 2026)
  • Pricing disclosure: Does not publish prices, day rates or worked examples on its public website as of 2026-07-16; the outsourced DPO page states pricing 'depends on the complexity of your data landscape' and that clients 'pay only for the time from your DPO that you use' (dpocentre.com, checked 16 July 2026)
  • Team credentials: Publishes a team page of roughly 100+ named staff with per-person qualifications including CIPP/E, CIPM, CIPT, AIGP, FIP and legal qualifications (LL.B, LL.M) (dpocentre.com, checked 16 July 2026)
  • PI insurance / liability: Does not publish professional-indemnity cover or engagement liability terms on its public website as of 2026-07-16 (outsourced DPO service page and contact page checked) (dpocentre.com, checked 16 July 2026)
  • Independent accreditation: Displays accreditation logos in its site footer but does not publish a legible register of its own ISO certificates or certifying bodies on the pages checked as of 2026-07-16 (dpocentre.com, checked 16 July 2026)
  • Named client outcomes: Publishes 67 case studies naming clients, including Mazda UK, AlRayan Bank, West Nottinghamshire College and Birmingham & Solihull Mental Health NHS Foundation Trust (dpocentre.com, checked 16 July 2026)
  • AI-use disclosure: Privacy notice discloses the firm's own AI use: AI-derived insight for suggestions and recommendations built from aggregated customer data, and transcription of Teams calls using Microsoft Copilot; it also states individuals will not be subject to solely automated decisions (dpocentre.com, checked 16 July 2026)
  • Ownership: About page states The DPO Centre was acquired by Axiom GRC, a governance and compliance group, on 1 September 2025 (dpocentre.com, checked 16 July 2026)
  • Trustpilot: TrustScore 3.2 from a single review on an unclaimed profile; no reviews in the last 12 months and the one review relates to a recruitment experience, not client service (Trustpilot, checked 16 July 2026)

Europrivacy certification support offered as a service (dpocentre.com/services/, 2026-07-16)

First DPO or AI policyExposed to the EU AI ActRegulated sectorsSeeking ISO 42001 certification

Where this firm appears

If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.

This is an independent editorial guide, not legal advice.