# The DPO Centre - **Type:** Advisory firm - **Website:** https://www.dpocentre.com - **Assessed by:** The Assurance Desk (Add-Venture Advisory Ltd) A UK outsourced DPO firm with roughly 100+ named staff and an AI governance line alongside its GDPR work, owned by Axiom GRC since September 2025. ## The DPO Centre scores Scored 1 to 5 on six criteria. There is no overall score. ### Help when things go wrong: 3/5 Outsourced DPO page describes cooperating with regulators including the ICO on clients' behalf, but publishes no engagement outcomes (dpocentre.com/services/outsourced-dpo-services/, 2026-07-16) ### Qualifications of the people who do the work: 5/5 ~100+ named practitioners with per-person CIPP/E, CIPM, CIPT, AIGP, FIP and legal qualifications published (dpocentre.com/about-us/our-team/, 2026-07-16) ### What it publishes about fees: 3/5 Fractional, pay-for-time model explained but no figures or worked examples published (dpocentre.com/services/outsourced-dpo-services/, 2026-07-16) ### Knowledge of your sector: 4/5 Sector pages plus sector-specific services (NHS DSPT audits, Caldicott Guardian, life sciences) and 67 named sector case studies (dpocentre.com/services/, /case-studies/, 2026-07-16) ### Independence from what it sells: 4/5 Advice-only model with no software product to sell; Axiom GRC group ownership is disclosed on the about page (dpocentre.com/about-us/, 2026-07-16) ### Who carries the risk if the advice is wrong: 2/5 Regulator-cooperation and breach support commitments described in service copy, but no PI cover or liability terms published as of 2026-07-16 (dpocentre.com/services/outsourced-dpo-services/) ## Sources for The DPO Centre Every line carries the page it was read on and the date it was checked. - Companies House registration: THE DPO CENTRE LTD, company number 10874595, incorporated 19 July 2017, status Active, registered office 20 Grosvenor Place, London SW1X 7HN - Source: https://find-and-update.company-information.service.gov.uk/company/10874595 - Checked: 2026-07-16 - Service scope: Outsourced and interim DPO services, EU & UK GDPR representation, DSAR response, data protection consultancy and training, plus AI-governance services including Outsourced AI Officers, AI Impact Assessments and an EU AI Act Readiness Assessment - Source: https://www.dpocentre.com/services/ - Checked: 2026-07-16 - Pricing disclosure: Does not publish prices, day rates or worked examples on its public website as of 2026-07-16; the outsourced DPO page states pricing 'depends on the complexity of your data landscape' and that clients 'pay only for the time from your DPO that you use' - Source: https://www.dpocentre.com/services/outsourced-dpo-services/ - Checked: 2026-07-16 - Team credentials: Publishes a team page of roughly 100+ named staff with per-person qualifications including CIPP/E, CIPM, CIPT, AIGP, FIP and legal qualifications (LL.B, LL.M) - Source: https://www.dpocentre.com/about-us/our-team/ - Checked: 2026-07-16 - PI insurance / liability: Does not publish professional-indemnity cover or engagement liability terms on its public website as of 2026-07-16 (outsourced DPO service page and contact page checked) - Source: https://www.dpocentre.com/services/outsourced-dpo-services/ - Checked: 2026-07-16 - Independent accreditation: Displays accreditation logos in its site footer but does not publish a legible register of its own ISO certificates or certifying bodies on the pages checked as of 2026-07-16 - Source: https://www.dpocentre.com/contact-us/ - Checked: 2026-07-16 - Named client outcomes: Publishes 67 case studies naming clients, including Mazda UK, AlRayan Bank, West Nottinghamshire College and Birmingham & Solihull Mental Health NHS Foundation Trust - Source: https://www.dpocentre.com/case-studies/ - Checked: 2026-07-16 - AI-use disclosure: Privacy notice discloses the firm's own AI use: AI-derived insight for suggestions and recommendations built from aggregated customer data, and transcription of Teams calls using Microsoft Copilot; it also states individuals will not be subject to solely automated decisions - Source: https://www.dpocentre.com/privacy-notice/ - Checked: 2026-07-16 - Ownership: About page states The DPO Centre was acquired by Axiom GRC, a governance and compliance group, on 1 September 2025 - Source: https://www.dpocentre.com/about-us/ - Checked: 2026-07-16 ## What this provider publishes Not published means we did not find it on the firm's own pages. - Price: Not published - Indemnity cover: Not published - Credentials: Published - Independent accreditation: Not published - Client results: Published - How it uses AI: Published ## Strengths - Publishes one of the most detailed team-credentials pages in the sector: ~100+ named staff with per-person CIPP/E, CIPM, CIPT, AIGP, FIP and legal qualifications - 67 named client case studies across sectors including NHS trusts, finance and consumer brands - Distinct AI-governance service line: Outsourced AI Officer, AI Impact Assessment and EU AI Act Readiness Assessment pages - Discloses its own AI use (recommendation insights and Microsoft Copilot call transcription) in its privacy notice ## Things to check Each one carries the factual basis it rests on. - No prices, day rates or worked examples are published; costing requires enquiry. - Basis: Outsourced DPO page states pricing 'depends on the complexity of your data landscape' with no figures (dpocentre.com/services/outsourced-dpo-services/, 2026-07-16) - Does not publish professional-indemnity cover or engagement liability terms on its public website. - Basis: No PI or liability disclosure found on service or contact pages checked 2026-07-16 (dpocentre.com/services/outsourced-dpo-services/) - Its own independent certifications (e.g. ISO 27001) and certifying bodies are not set out in a verifiable register on the site. - Basis: Footer accreditation logos are displayed without certificate details on pages checked 2026-07-16 (dpocentre.com/contact-us/) - Now part of the Axiom GRC group rather than an independent standalone firm; buyers may wish to ask how group ownership affects service. - Basis: About page states acquisition by Axiom GRC on 1 September 2025 (dpocentre.com/about-us/, 2026-07-16) ## Where this firm appears - [Do you need a data protection officer?](https://theassurancedesk.com/best/first-appointment) - [Can the firm that prepares you also certify you?](https://theassurancedesk.com/best/certification-seeking) - [Does the EU AI Act apply to a UK firm?](https://theassurancedesk.com/best/eu-ai-act-exposed) - [Your sector adds its own rules to UK data protection law](https://theassurancedesk.com/best/sector-regulated) - [Compare providers](https://theassurancedesk.com/compare) --- **Scope.** The Assurance Desk covers data protection, AI governance and cyber security in the United Kingdom and the United States. It scores providers in both: UK-facing firms, and firms based in the United States. Every provider scored so far was selected for data-protection, AI-governance or security-assurance work. Where a page describes law, it names the country that law applies in. **Who publishes this.** The Assurance Desk is published by Add-Venture Advisory Ltd, company number 11854524, registered in England and Wales. The same owner runs Avouch, a marketing agency that sells AI visibility services to firms of the kind this site covers. That is a conflict of interest, and it is disclosed here. **Corrections.** If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.