{ "study_id": "desk-outsourced-dpo-2026-10-17", "client_id": "theassurancedesk", "analysis_date": "2026-10-17", "status": "Reviewed provider-page observations", "title": "What do outsourced DPO services actually include?", "denominator": 25, "unit": "Distinct provider, not page, brand, office or person", "sampling": { "frame": 140, "candidates": 36, "included_providers": 25, "merged_duplicate": 1, "incidental_matches": 3, "unconfirmed_eligibility": 6, "inaccessible_eligibility": 1 }, "scope": "Published information for 25 directory providers offering outsourced DPO appointments with UK presence or explicit UK GDPR coverage. Not a representative UK market survey or delivery assessment.", "definitions": { "price": "Numerical DPO price or price band and billing unit", "setup": "Setup fee or explicit no setup fee", "term": "Commitment or cancellation period", "allowance": "Amount of included support time or work", "contact": "Assigned DPO or dedicated contact", "cover": "Explicit continuity or absence cover", "availability": "Support hours or response deadline", "monitoring": "Ongoing monitoring, audit or review", "rights": "Help with personal-data rights requests", "breach": "Help with personal-data breaches", "training": "Staff training", "software": "Client software or learning portal" }, "state_definitions": { "published": "Relevant wording found in the checked page set; scope describes qualifications.", "not_found_in_checked_pages": "No qualifying wording in these pages. Not a claim that the service is unavailable.", "unclear": "Related wording exists but does not establish the defined item.", "inaccessible": "Evidence could not be read; never treated as absent." }, "aggregate_observations": { "price": { "label": "Numerical DPO price or price band and billing unit", "denominator": 25, "states": { "published": 3, "not_found_in_checked_pages": 22 }, "published_scopes": { "explicit_inclusion": 1, "qualified": 2 } }, "setup": { "label": "Setup fee or explicit no setup fee", "denominator": 25, "states": { "not_found_in_checked_pages": 24, "published": 1 }, "published_scopes": { "explicit_inclusion": 1 } }, "term": { "label": "Commitment or cancellation period", "denominator": 25, "states": { "unclear": 1, "not_found_in_checked_pages": 19, "published": 5 }, "published_scopes": { "explicit_inclusion": 3, "qualified": 2 } }, "allowance": { "label": "Amount of included support time or work", "denominator": 25, "states": { "published": 3, "not_found_in_checked_pages": 21, "unclear": 1 }, "published_scopes": { "explicit_inclusion": 1, "qualified": 2 } }, "contact": { "label": "Assigned DPO or dedicated contact", "denominator": 25, "states": { "published": 19, "not_found_in_checked_pages": 6 }, "published_scopes": { "explicit_inclusion": 15, "qualified": 3, "capability": 1 } }, "cover": { "label": "Explicit continuity or absence cover", "denominator": 25, "states": { "not_found_in_checked_pages": 18, "unclear": 2, "published": 5 }, "published_scopes": { "capability": 1, "qualified": 1, "explicit_inclusion": 3 } }, "availability": { "label": "Support hours or response deadline", "denominator": 25, "states": { "not_found_in_checked_pages": 20, "published": 3, "unclear": 2 }, "published_scopes": { "explicit_inclusion": 2, "qualified": 1 } }, "monitoring": { "label": "Ongoing monitoring, audit or review", "denominator": 25, "states": { "published": 21, "unclear": 4 }, "published_scopes": { "qualified": 2, "capability": 16, "explicit_inclusion": 3 } }, "rights": { "label": "Help with personal-data rights requests", "denominator": 25, "states": { "published": 19, "unclear": 5, "not_found_in_checked_pages": 1 }, "published_scopes": { "qualified": 7, "capability": 10, "explicit_inclusion": 2 } }, "breach": { "label": "Help with personal-data breaches", "denominator": 25, "states": { "published": 20, "unclear": 2, "not_found_in_checked_pages": 3 }, "published_scopes": { "qualified": 4, "capability": 14, "explicit_inclusion": 2 } }, "training": { "label": "Staff training", "denominator": 25, "states": { "not_found_in_checked_pages": 5, "unclear": 4, "published": 16 }, "published_scopes": { "explicit_inclusion": 3, "capability": 10, "qualified": 2, "separate": 1 } }, "software": { "label": "Client software or learning portal", "denominator": 25, "states": { "not_found_in_checked_pages": 18, "published": 6, "unclear": 1 }, "published_scopes": { "explicit_inclusion": 2, "qualified": 4 } } }, "chart_data": [ { "key": "contact", "label": "Assigned DPO or client team", "count": 19, "denominator": 25 }, { "key": "cover", "label": "Explicit continuity or absence cover", "count": 5, "denominator": 25 }, { "key": "term", "label": "Commitment or cancellation period", "count": 5, "denominator": 25 }, { "key": "allowance", "label": "Defined support allowance", "count": 3, "denominator": 25 }, { "key": "availability", "label": "Stated hours or response deadline", "count": 3, "denominator": 25 }, { "key": "dpo_price", "label": "DPO-specific numerical price", "count": 2, "denominator": 25 }, { "key": "setup", "label": "Setup charge or explicit no charge", "count": 1, "denominator": 25 } ], "price_note": "Two providers publish a DPO-specific numerical price. A third publishes a broader range for mixed fractional roles, including DPOs; that is recorded separately and excluded from the DPO-specific price bar. These figures are not comparable quotes.", "limitations": [ "Directory-based purposive sample, not a census or representative market sample.", "At most four substantive linked service/pricing/terms pages per provider, plus eligibility navigation and failed reads. No private proposals or provider interviews.", "Measures publication, not competence, independence, response performance or actual delivery.", "One editor reviewed twice; not independent double coding.", "Different packages and qualifications are retained. A service description is not a promise of universal inclusion.", "International providers with explicit UK GDPR coverage may be included; UK establishment is not asserted for every provider.", "Alternative public readers supplied HewardMills and VeraSafe captures; original failed reads are preserved.", "Pages can change after the reading date." ], "providers": [ { "provider_id": "athlex", "name": "Athlex", "eligibility_basis": "UK presence or UK-facing service", "checked_pages": [ { "url": "https://athlex.co.uk/outsourced-dpo/", "kind": "initial_service", "readable": true, "status": 200, "reader": "ordinary HTTP" } ], "observations": { "price": { "state": "published", "scope": "explicit_inclusion", "note": "Essentials £350, Pro £650 and Premium £950 per month plus VAT; monthly hours differ.", "source_url": "https://athlex.co.uk/outsourced-dpo/", "checked_on": "2026-10-17", "price_scope": "dpo_specific" }, "setup": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "term": { "state": "unclear", "scope": "not_established", "note": "A 12-month discounted option is offered, but that alone does not establish a minimum term or cancellation period for the monthly plans." }, "allowance": { "state": "published", "scope": "explicit_inclusion", "note": "Essentials 2, Pro 5, Premium 7 hours monthly. Additional hours cost extra; unused hours do not usually carry over.", "source_url": "https://athlex.co.uk/outsourced-dpo/", "checked_on": "2026-10-17" }, "contact": { "state": "published", "scope": "explicit_inclusion", "note": "Dedicated officer described.", "source_url": "https://athlex.co.uk/outsourced-dpo/", "checked_on": "2026-10-17" }, "cover": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "availability": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "monitoring": { "state": "published", "scope": "qualified", "note": "Annual audit is listed in the package comparison; package applicability must be checked.", "source_url": "https://athlex.co.uk/outsourced-dpo/", "checked_on": "2026-10-17" }, "rights": { "state": "published", "scope": "qualified", "note": "Review and guidance can use the monthly allowance, not necessarily end-to-end fulfilment.", "source_url": "https://athlex.co.uk/outsourced-dpo/", "checked_on": "2026-10-17" }, "breach": { "state": "published", "scope": "qualified", "note": "Breach help is described, with plan and monthly-hours limits to establish.", "source_url": "https://athlex.co.uk/outsourced-dpo/", "checked_on": "2026-10-17" }, "training": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "software": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." } } }, { "provider_id": "bridewell", "name": "Bridewell", "eligibility_basis": "UK presence or UK-facing service", "checked_pages": [ { "url": "https://www.bridewell.com/dpo-as-a-service", "kind": "initial_service", "readable": true, "status": 200, "reader": "ordinary HTTP" } ], "observations": { "price": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set.", "price_scope": "not_established" }, "setup": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "term": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "allowance": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "contact": { "state": "published", "scope": "explicit_inclusion", "note": "Dedicated DPO described; exact appointment to agree.", "source_url": "https://www.bridewell.com/dpo-as-a-service", "checked_on": "2026-10-17" }, "cover": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "availability": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "monitoring": { "state": "published", "scope": "capability", "note": "Service description includes monitoring and audit activity.", "source_url": "https://www.bridewell.com/dpo-as-a-service", "checked_on": "2026-10-17" }, "rights": { "state": "published", "scope": "capability", "note": "Rights-request advice described.", "source_url": "https://www.bridewell.com/dpo-as-a-service", "checked_on": "2026-10-17" }, "breach": { "state": "published", "scope": "capability", "note": "Incident support described; legal notification clock is not response time.", "source_url": "https://www.bridewell.com/dpo-as-a-service", "checked_on": "2026-10-17" }, "training": { "state": "unclear", "scope": "not_established", "note": "Additional bespoke training is for DPOs; a general staff-training entitlement within the outsourced service is not established." }, "software": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." } } }, { "provider_id": "dataguard", "name": "DataGuard", "eligibility_basis": "UK presence or UK-facing service", "checked_pages": [ { "url": "https://www.dataguard.com", "kind": "eligibility_home", "readable": true, "status": 200, "reader": "ordinary HTTP" }, { "url": "https://www.dataguard.com/pricing/", "kind": "linked_pricing", "readable": true, "status": 200, "reader": "ordinary HTTP" }, { "url": "https://www.dataguard.com/en-gb/lp/external-data-protection-officer", "kind": "main_service", "readable": true, "status": 200, "reader": "ordinary HTTP" } ], "observations": { "price": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set.", "price_scope": "not_established" }, "setup": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "term": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "allowance": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "contact": { "state": "published", "scope": "explicit_inclusion", "note": "Assigned specialist on the UK external-DPO landing page.", "source_url": "https://www.dataguard.com/en-gb/lp/external-data-protection-officer", "checked_on": "2026-10-17" }, "cover": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "availability": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "monitoring": { "state": "published", "scope": "capability", "note": "Audit and ongoing platform/process updates described.", "source_url": "https://www.dataguard.com/en-gb/lp/external-data-protection-officer", "checked_on": "2026-10-17" }, "rights": { "state": "published", "scope": "explicit_inclusion", "note": "Rights-request help includes platform workflows.", "source_url": "https://www.dataguard.com/en-gb/lp/external-data-protection-officer", "checked_on": "2026-10-17" }, "breach": { "state": "published", "scope": "explicit_inclusion", "note": "Breach support described.", "source_url": "https://www.dataguard.com/en-gb/lp/external-data-protection-officer", "checked_on": "2026-10-17" }, "training": { "state": "published", "scope": "explicit_inclusion", "note": "Platform includes training capability.", "source_url": "https://www.dataguard.com/en-gb/lp/external-data-protection-officer", "checked_on": "2026-10-17" }, "software": { "state": "published", "scope": "explicit_inclusion", "note": "Compliance platform is part of the proposed service.", "source_url": "https://www.dataguard.com/en-gb/lp/external-data-protection-officer", "checked_on": "2026-10-17" } } }, { "provider_id": "dpo-service", "name": "DPO-Service", "eligibility_basis": "UK presence or UK-facing service", "checked_pages": [ { "url": "https://dpo-service.co.uk/dpo-services/", "kind": "initial_service", "readable": true, "status": 200, "reader": "ordinary HTTP" }, { "url": "https://dpo-service.co.uk/", "kind": "main_service", "readable": true, "status": 200, "reader": "ordinary HTTP" }, { "url": "https://dpo-service.co.uk/pricing/", "kind": "linked_pricing", "readable": true, "status": 200, "reader": "ordinary HTTP" } ], "observations": { "price": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set.", "price_scope": "not_established" }, "setup": { "state": "published", "scope": "explicit_inclusion", "note": "Explicit zero setup charge.", "source_url": "https://dpo-service.co.uk/", "checked_on": "2026-10-17" }, "term": { "state": "published", "scope": "explicit_inclusion", "note": "Rolling monthly arrangement.", "source_url": "https://dpo-service.co.uk/", "checked_on": "2026-10-17" }, "allowance": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "contact": { "state": "published", "scope": "explicit_inclusion", "note": "Named officer stated.", "source_url": "https://dpo-service.co.uk/", "checked_on": "2026-10-17" }, "cover": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "availability": { "state": "published", "scope": "explicit_inclusion", "note": "Service response badge; 48-hour onboarding and sales reply times excluded.", "source_url": "https://dpo-service.co.uk/", "checked_on": "2026-10-17" }, "monitoring": { "state": "published", "scope": "capability", "note": "Ongoing reporting and review described.", "source_url": "https://dpo-service.co.uk/", "checked_on": "2026-10-17" }, "rights": { "state": "published", "scope": "qualified", "note": "Guidance or full handling depends on plan; complex/high-volume requests can be additional.", "source_url": "https://dpo-service.co.uk/", "checked_on": "2026-10-17" }, "breach": { "state": "published", "scope": "capability", "note": "Incident and regulator help described.", "source_url": "https://dpo-service.co.uk/", "checked_on": "2026-10-17" }, "training": { "state": "published", "scope": "capability", "note": "Staff training described.", "source_url": "https://dpo-service.co.uk/", "checked_on": "2026-10-17" }, "software": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." } } }, { "provider_id": "evalian", "name": "Evalian", "eligibility_basis": "UK presence or UK-facing service", "checked_pages": [ { "url": "https://evalian.co.uk/data-protection/outsourced-dpo-services/", "kind": "main_service", "readable": true, "status": 200, "reader": "ordinary HTTP" }, { "url": "https://evalian.co.uk/dpo-as-a-service-costs-a-comprehensive-guide/", "kind": "linked_pricing", "readable": true, "status": 200, "reader": "ordinary HTTP" }, { "url": "https://evalian.co.uk", "kind": "eligibility_home", "readable": true, "status": 200, "reader": "ordinary HTTP" }, { "url": "https://evalian.co.uk/evalian-data-protection-packages/", "kind": "linked_packages", "readable": true, "status": 200, "reader": "ordinary HTTP" } ], "observations": { "price": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set.", "price_scope": "not_established" }, "setup": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "term": { "state": "published", "scope": "explicit_inclusion", "note": "Homepage explicitly applies 12-month subscriptions to outsourced DPO.", "source_url": "https://evalian.co.uk", "checked_on": "2026-10-17" }, "allowance": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "contact": { "state": "published", "scope": "explicit_inclusion", "note": "Named consultant supported by wider team.", "source_url": "https://evalian.co.uk/data-protection/outsourced-dpo-services/", "checked_on": "2026-10-17" }, "cover": { "state": "unclear", "scope": "not_established", "note": "Package matrix lists a supporting DPO, but does not expressly explain absence/holiday cover in these pages." }, "availability": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "monitoring": { "state": "published", "scope": "qualified", "note": "Annual audit appears in package matrix; package-specific.", "source_url": "https://evalian.co.uk/evalian-data-protection-packages/", "checked_on": "2026-10-17" }, "rights": { "state": "published", "scope": "capability", "note": "Rights-request help is part of the service description.", "source_url": "https://evalian.co.uk/data-protection/outsourced-dpo-services/", "checked_on": "2026-10-17" }, "breach": { "state": "published", "scope": "capability", "note": "Prioritised support, without a quantified response deadline.", "source_url": "https://evalian.co.uk/data-protection/outsourced-dpo-services/", "checked_on": "2026-10-17" }, "training": { "state": "published", "scope": "capability", "note": "Staff awareness training described.", "source_url": "https://evalian.co.uk/data-protection/outsourced-dpo-services/", "checked_on": "2026-10-17" }, "software": { "state": "published", "scope": "qualified", "note": "Learning access may be included; not a claim about a full compliance software platform.", "source_url": "https://evalian.co.uk/dpo-as-a-service-costs-a-comprehensive-guide/", "checked_on": "2026-10-17" } } }, { "provider_id": "grci-law", "name": "GRC Solutions (formerly GRCI Law / IT Governance)", "eligibility_basis": "UK presence or UK-facing service", "checked_pages": [ { "url": "https://uk.grcsolutions.io/product/data-protection-officer-dpo-as-a-service", "kind": "initial_service", "readable": true, "status": 200, "reader": "ordinary HTTP" }, { "url": "https://grcsolutions.io/legal/terms-for-buying-goods-and-services-on-our-site/", "kind": "linked_terms", "readable": true, "status": 200, "reader": "ordinary HTTP" }, { "url": "https://grcsolutions.io/dpo-as-a-service/", "kind": "initial_service", "readable": true, "status": 200, "reader": "ordinary HTTP" } ], "observations": { "price": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set.", "price_scope": "not_established" }, "setup": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "term": { "state": "published", "scope": "explicit_inclusion", "note": "Monthly payment does not mean monthly cancellation.", "source_url": "https://uk.grcsolutions.io/product/data-protection-officer-dpo-as-a-service", "checked_on": "2026-10-17" }, "allowance": { "state": "published", "scope": "qualified", "note": "Unlimited advice access; implementation work explicitly excluded.", "source_url": "https://uk.grcsolutions.io/product/data-protection-officer-dpo-as-a-service", "checked_on": "2026-10-17" }, "contact": { "state": "published", "scope": "explicit_inclusion", "note": "Named lead/contract team also defined in service terms.", "source_url": "https://uk.grcsolutions.io/product/data-protection-officer-dpo-as-a-service", "checked_on": "2026-10-17" }, "cover": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "availability": { "state": "published", "scope": "explicit_inclusion", "note": "Contact hours, not a response deadline.", "source_url": "https://uk.grcsolutions.io/product/data-protection-officer-dpo-as-a-service", "checked_on": "2026-10-17" }, "monitoring": { "state": "published", "scope": "explicit_inclusion", "note": "First-year gap analysis, then annual audit.", "source_url": "https://uk.grcsolutions.io/product/data-protection-officer-dpo-as-a-service", "checked_on": "2026-10-17" }, "rights": { "state": "published", "scope": "qualified", "note": "Advice included; undertaking the request is explicitly excluded.", "source_url": "https://uk.grcsolutions.io/product/data-protection-officer-dpo-as-a-service", "checked_on": "2026-10-17" }, "breach": { "state": "published", "scope": "qualified", "note": "Guidance included; reporting/dealing with a breach excluded from this package.", "source_url": "https://uk.grcsolutions.io/product/data-protection-officer-dpo-as-a-service", "checked_on": "2026-10-17" }, "training": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "software": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." } } }, { "provider_id": "handley-gill", "name": "Handley Gill", "eligibility_basis": "UK presence or UK-facing service", "checked_pages": [ { "url": "https://www.handleygill.co.uk/", "kind": "eligibility_home", "readable": true, "status": 200, "reader": "ordinary HTTP" }, { "url": "https://www.handleygill.co.uk/data-protection-data-privacy", "kind": "main_service", "readable": true, "status": 200, "reader": "ordinary HTTP" } ], "observations": { "price": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set.", "price_scope": "not_established" }, "setup": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "term": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "allowance": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "contact": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "cover": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "availability": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "monitoring": { "state": "unclear", "scope": "not_established", "note": "These capabilities appear in the wider privacy-services list, not as explicit inclusions in the outsourced DPO package." }, "rights": { "state": "unclear", "scope": "not_established", "note": "These capabilities appear in the wider privacy-services list, not as explicit inclusions in the outsourced DPO package." }, "breach": { "state": "unclear", "scope": "not_established", "note": "These capabilities appear in the wider privacy-services list, not as explicit inclusions in the outsourced DPO package." }, "training": { "state": "unclear", "scope": "not_established", "note": "These capabilities appear in the wider privacy-services list, not as explicit inclusions in the outsourced DPO package." }, "software": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." } } }, { "provider_id": "hewardmills", "name": "HewardMills", "eligibility_basis": "UK presence or UK-facing service", "checked_pages": [ { "url": "https://www.hewardmills.com/services/dpo-advanced/", "kind": "linked_packages", "readable": true, "status": null, "reader": "Codex in-app browser; automatic challenge cleared without interaction" }, { "url": "https://hewardmills.com/dpo-essentials/", "kind": "initial_service", "readable": false, "status": 403, "reader": "ordinary HTTP" }, { "url": "https://www.hewardmills.com/services/dpo-essentials/", "kind": "main_service", "readable": true, "status": null, "reader": "Codex in-app browser; automatic challenge cleared without interaction" } ], "observations": { "price": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set.", "price_scope": "not_established" }, "setup": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "term": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "allowance": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "contact": { "state": "published", "scope": "qualified", "note": "Assigned client team in Advanced; not a promise of one named individual.", "source_url": "https://www.hewardmills.com/services/dpo-advanced/", "checked_on": "2026-10-17" }, "cover": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "availability": { "state": "unclear", "scope": "not_established", "note": "Query support at any time is stated, but no defined operating hours or response deadline is supplied." }, "monitoring": { "state": "published", "scope": "explicit_inclusion", "note": "Essentials describes health checks and reporting.", "source_url": "https://www.hewardmills.com/services/dpo-essentials/", "checked_on": "2026-10-17" }, "rights": { "state": "published", "scope": "qualified", "note": "Advanced provides process support; hands-on handling limits to agree.", "source_url": "https://www.hewardmills.com/services/dpo-advanced/", "checked_on": "2026-10-17" }, "breach": { "state": "published", "scope": "qualified", "note": "Advanced describes breach-process support.", "source_url": "https://www.hewardmills.com/services/dpo-advanced/", "checked_on": "2026-10-17" }, "training": { "state": "published", "scope": "explicit_inclusion", "note": "Essentials includes e-learning resources.", "source_url": "https://www.hewardmills.com/services/dpo-essentials/", "checked_on": "2026-10-17" }, "software": { "state": "published", "scope": "qualified", "note": "Online support and e-learning resources; no assertion of a standalone compliance software licence.", "source_url": "https://www.hewardmills.com/services/dpo-essentials/", "checked_on": "2026-10-17" } } }, { "provider_id": "hope-and-may", "name": "Hope & May", "eligibility_basis": "UK presence or UK-facing service", "checked_pages": [ { "url": "https://hope-may.com/outsourced-data-protection-officer/", "kind": "initial_service", "readable": true, "status": 200, "reader": "ordinary HTTP" } ], "observations": { "price": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set.", "price_scope": "not_established" }, "setup": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "term": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "allowance": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "contact": { "state": "published", "scope": "explicit_inclusion", "note": "Named officer described.", "source_url": "https://hope-may.com/outsourced-data-protection-officer/", "checked_on": "2026-10-17" }, "cover": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "availability": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "monitoring": { "state": "published", "scope": "capability", "note": "Ongoing monitoring described.", "source_url": "https://hope-may.com/outsourced-data-protection-officer/", "checked_on": "2026-10-17" }, "rights": { "state": "published", "scope": "capability", "note": "Rights-request support described.", "source_url": "https://hope-may.com/outsourced-data-protection-officer/", "checked_on": "2026-10-17" }, "breach": { "state": "published", "scope": "capability", "note": "Breach management described.", "source_url": "https://hope-may.com/outsourced-data-protection-officer/", "checked_on": "2026-10-17" }, "training": { "state": "published", "scope": "capability", "note": "Staff training described.", "source_url": "https://hope-may.com/outsourced-data-protection-officer/", "checked_on": "2026-10-17" }, "software": { "state": "published", "scope": "explicit_inclusion", "note": "Learning platform at no extra cost, not a full compliance software claim.", "source_url": "https://hope-may.com/outsourced-data-protection-officer/", "checked_on": "2026-10-17" } } }, { "provider_id": "jvr-consultancy", "name": "JVR Consultancy", "eligibility_basis": "UK presence or UK-facing service", "checked_pages": [ { "url": "https://www.jvrconsultancy.com/gdpr/dpo-service-data-protection-officer-outsourcing", "kind": "initial_service", "readable": true, "status": 200, "reader": "ordinary HTTP" }, { "url": "https://www.jvrconsultancy.com/pricing", "kind": "linked_pricing", "readable": false, "status": 200, "reader": "ordinary HTTP" } ], "observations": { "price": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set.", "price_scope": "not_established" }, "setup": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "term": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "allowance": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "contact": { "state": "published", "scope": "qualified", "note": "Named DPO option described; confirm chosen arrangement.", "source_url": "https://www.jvrconsultancy.com/gdpr/dpo-service-data-protection-officer-outsourcing", "checked_on": "2026-10-17" }, "cover": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "availability": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "monitoring": { "state": "published", "scope": "capability", "note": "Monitoring described.", "source_url": "https://www.jvrconsultancy.com/gdpr/dpo-service-data-protection-officer-outsourcing", "checked_on": "2026-10-17" }, "rights": { "state": "published", "scope": "capability", "note": "Rights-request help described.", "source_url": "https://www.jvrconsultancy.com/gdpr/dpo-service-data-protection-officer-outsourcing", "checked_on": "2026-10-17" }, "breach": { "state": "published", "scope": "capability", "note": "Incident advice described.", "source_url": "https://www.jvrconsultancy.com/gdpr/dpo-service-data-protection-officer-outsourcing", "checked_on": "2026-10-17" }, "training": { "state": "published", "scope": "capability", "note": "Training described within service.", "source_url": "https://www.jvrconsultancy.com/gdpr/dpo-service-data-protection-officer-outsourcing", "checked_on": "2026-10-17" }, "software": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." } } }, { "provider_id": "kafico", "name": "Kafico", "eligibility_basis": "UK presence or UK-facing service", "checked_pages": [ { "url": "https://www.kafico.co.uk/dpo-services", "kind": "initial_service", "readable": true, "status": 200, "reader": "ordinary HTTP" } ], "observations": { "price": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set.", "price_scope": "not_established" }, "setup": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "term": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "allowance": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "contact": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "cover": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "availability": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "monitoring": { "state": "unclear", "scope": "not_established", "note": "Health checks/training and customer feedback appear alongside the retained DPO offer; inclusion in the retainer is not established." }, "rights": { "state": "unclear", "scope": "not_established", "note": "Health checks/training and customer feedback appear alongside the retained DPO offer; inclusion in the retainer is not established." }, "breach": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "training": { "state": "unclear", "scope": "not_established", "note": "Health checks/training and customer feedback appear alongside the retained DPO offer; inclusion in the retainer is not established." }, "software": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." } } }, { "provider_id": "pembroke-privacy", "name": "Pembroke Privacy", "eligibility_basis": "UK presence or UK-facing service", "checked_pages": [ { "url": "https://pembrokeprivacy.com/data-protection-support-consulting-services/outsourced-data-protection-officer-dpo-services/", "kind": "initial_service", "readable": true, "status": 200, "reader": "ordinary HTTP" } ], "observations": { "price": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set.", "price_scope": "not_established" }, "setup": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "term": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "allowance": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "contact": { "state": "published", "scope": "explicit_inclusion", "note": "Dedicated lead with team support described.", "source_url": "https://pembrokeprivacy.com/data-protection-support-consulting-services/outsourced-data-protection-officer-dpo-services/", "checked_on": "2026-10-17" }, "cover": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "availability": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "monitoring": { "state": "published", "scope": "capability", "note": "Regular reporting and review described.", "source_url": "https://pembrokeprivacy.com/data-protection-support-consulting-services/outsourced-data-protection-officer-dpo-services/", "checked_on": "2026-10-17" }, "rights": { "state": "published", "scope": "capability", "note": "Rights-request process help described.", "source_url": "https://pembrokeprivacy.com/data-protection-support-consulting-services/outsourced-data-protection-officer-dpo-services/", "checked_on": "2026-10-17" }, "breach": { "state": "published", "scope": "capability", "note": "Incident help described.", "source_url": "https://pembrokeprivacy.com/data-protection-support-consulting-services/outsourced-data-protection-officer-dpo-services/", "checked_on": "2026-10-17" }, "training": { "state": "published", "scope": "qualified", "note": "Training options described; package entitlement to establish.", "source_url": "https://pembrokeprivacy.com/data-protection-support-consulting-services/outsourced-data-protection-officer-dpo-services/", "checked_on": "2026-10-17" }, "software": { "state": "published", "scope": "qualified", "note": "Learning-system access available. DPO dashboard is described as a delivery aid, not necessarily client software access.", "source_url": "https://pembrokeprivacy.com/data-protection-support-consulting-services/outsourced-data-protection-officer-dpo-services/", "checked_on": "2026-10-17" } } }, { "provider_id": "securys", "name": "Securys", "eligibility_basis": "UK presence or UK-facing service", "checked_pages": [ { "url": "https://www.securys.co.uk/dpo-as-a-service", "kind": "initial_service", "readable": true, "status": 200, "reader": "ordinary HTTP" } ], "observations": { "price": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set.", "price_scope": "not_established" }, "setup": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "term": { "state": "published", "scope": "qualified", "note": "Annual subscription paid monthly; cancellation details to agree.", "source_url": "https://www.securys.co.uk/dpo-as-a-service", "checked_on": "2026-10-17" }, "allowance": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "contact": { "state": "published", "scope": "explicit_inclusion", "note": "Assigned DPO described.", "source_url": "https://www.securys.co.uk/dpo-as-a-service", "checked_on": "2026-10-17" }, "cover": { "state": "published", "scope": "capability", "note": "Team continuity described; see full context.", "source_url": "https://www.securys.co.uk/dpo-as-a-service", "checked_on": "2026-10-17" }, "availability": { "state": "unclear", "scope": "not_established", "note": "You can call at any time does not establish staffed support hours or a response deadline." }, "monitoring": { "state": "published", "scope": "capability", "note": "Ongoing compliance role described.", "source_url": "https://www.securys.co.uk/dpo-as-a-service", "checked_on": "2026-10-17" }, "rights": { "state": "published", "scope": "qualified", "note": "DSAR coverage agreed in contract, not an unlimited handling promise.", "source_url": "https://www.securys.co.uk/dpo-as-a-service", "checked_on": "2026-10-17" }, "breach": { "state": "published", "scope": "capability", "note": "Breach support described.", "source_url": "https://www.securys.co.uk/dpo-as-a-service", "checked_on": "2026-10-17" }, "training": { "state": "published", "scope": "explicit_inclusion", "note": "Training described as included in service fee.", "source_url": "https://www.securys.co.uk/dpo-as-a-service", "checked_on": "2026-10-17" }, "software": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." } } }, { "provider_id": "dpo-centre", "name": "The DPO Centre", "eligibility_basis": "UK presence or UK-facing service", "checked_pages": [ { "url": "https://www.dpocentre.com/services/outsourced-dpo-services/", "kind": "initial_service", "readable": true, "status": 200, "reader": "ordinary HTTP" } ], "observations": { "price": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set.", "price_scope": "not_established" }, "setup": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "term": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "allowance": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "contact": { "state": "published", "scope": "explicit_inclusion", "note": "Primary contact and backup both onboarded.", "source_url": "https://www.dpocentre.com/services/outsourced-dpo-services/", "checked_on": "2026-10-17" }, "cover": { "state": "published", "scope": "qualified", "note": "Secondary cover at no additional cost within agreed resource level.", "source_url": "https://www.dpocentre.com/services/outsourced-dpo-services/", "checked_on": "2026-10-17" }, "availability": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "monitoring": { "state": "published", "scope": "capability", "note": "Structured ongoing work and reporting described.", "source_url": "https://www.dpocentre.com/services/outsourced-dpo-services/", "checked_on": "2026-10-17" }, "rights": { "state": "published", "scope": "capability", "note": "Service description explains rights support; exact operational work to agree.", "source_url": "https://www.dpocentre.com/services/outsourced-dpo-services/", "checked_on": "2026-10-17" }, "breach": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "training": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "software": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." } } }, { "provider_id": "data-protection-people", "name": "Data Protection People", "eligibility_basis": "UK presence or UK-facing service", "checked_pages": [ { "url": "https://dataprotectionpeople.com/resource-centre/outsourced-data-protection-officer/", "kind": "linked_service_detail", "readable": true, "status": 200, "reader": "ordinary HTTP" }, { "url": "https://dataprotectionpeople.com/service/outsourced-dpo/", "kind": "initial_service", "readable": true, "status": 200, "reader": "ordinary HTTP" } ], "observations": { "price": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set.", "price_scope": "not_established" }, "setup": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "term": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "allowance": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "contact": { "state": "published", "scope": "explicit_inclusion", "note": "Dedicated officer described in linked service explanation.", "source_url": "https://dataprotectionpeople.com/resource-centre/outsourced-data-protection-officer/", "checked_on": "2026-10-17" }, "cover": { "state": "published", "scope": "explicit_inclusion", "note": "Team cover explicitly explained.", "source_url": "https://dataprotectionpeople.com/service/outsourced-dpo/", "checked_on": "2026-10-17" }, "availability": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "monitoring": { "state": "published", "scope": "capability", "note": "Regular reviews described.", "source_url": "https://dataprotectionpeople.com/resource-centre/outsourced-data-protection-officer/", "checked_on": "2026-10-17" }, "rights": { "state": "unclear", "scope": "not_established", "note": "SAR support appears in the wider services menu/support offer, but the checked outsourced-DPO descriptions do not explicitly include it in that package." }, "breach": { "state": "published", "scope": "capability", "note": "Service capability described.", "source_url": "https://dataprotectionpeople.com/resource-centre/outsourced-data-protection-officer/", "checked_on": "2026-10-17" }, "training": { "state": "published", "scope": "capability", "note": "Training described within outsourced service.", "source_url": "https://dataprotectionpeople.com/resource-centre/outsourced-data-protection-officer/", "checked_on": "2026-10-17" }, "software": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." } } }, { "provider_id": "urm-consulting", "name": "URM Consulting", "eligibility_basis": "UK presence or UK-facing service", "checked_pages": [ { "url": "https://cdn.prod.website-files.com/663395d3790b636e6eefc3a3/6aa3be21ebdaf1f88632b2e8_URM%20Terms%20of%20Business%20final%20V1.0%202026.pdf", "kind": "linked_terms", "readable": true, "status": 200, "reader": "ordinary HTTP" }, { "url": "https://www.urmconsulting.com/about/terms-of-business", "kind": "linked_terms", "readable": true, "status": 200, "reader": "ordinary HTTP" }, { "url": "https://www.urmconsulting.com/data-protection/gdpr/virtual-dpo", "kind": "initial_service", "readable": true, "status": 200, "reader": "ordinary HTTP" } ], "observations": { "price": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set.", "price_scope": "not_established" }, "setup": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "term": { "state": "published", "scope": "qualified", "note": "General terms cover Virtual DPO Services and state three months written notice; the DPO Terms of Reference and signed specification must also be checked.", "source_url": "https://cdn.prod.website-files.com/663395d3790b636e6eefc3a3/6aa3be21ebdaf1f88632b2e8_URM%20Terms%20of%20Business%20final%20V1.0%202026.pdf", "checked_on": "2026-10-17" }, "allowance": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "contact": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "cover": { "state": "unclear", "scope": "not_established", "note": "General consultancy terms promise a substitute for illness or injury, but applicability to the separately defined Virtual DPO Services depends on its Terms of Reference." }, "availability": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "monitoring": { "state": "published", "scope": "capability", "note": "Annual compliance review described.", "source_url": "https://www.urmconsulting.com/data-protection/gdpr/virtual-dpo", "checked_on": "2026-10-17" }, "rights": { "state": "published", "scope": "capability", "note": "Rights-request support described.", "source_url": "https://www.urmconsulting.com/data-protection/gdpr/virtual-dpo", "checked_on": "2026-10-17" }, "breach": { "state": "published", "scope": "capability", "note": "Incident advice described.", "source_url": "https://www.urmconsulting.com/data-protection/gdpr/virtual-dpo", "checked_on": "2026-10-17" }, "training": { "state": "published", "scope": "capability", "note": "Training/awareness presentations described.", "source_url": "https://www.urmconsulting.com/data-protection/gdpr/virtual-dpo", "checked_on": "2026-10-17" }, "software": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." } } }, { "provider_id": "data-grc", "name": "Data GRC Ltd", "eligibility_basis": "UK presence or UK-facing service", "checked_pages": [ { "url": "https://datagrc.co.uk/terms-and-conditions/", "kind": "linked_terms", "readable": true, "status": 200, "reader": "ordinary HTTP" }, { "url": "https://datagrc.co.uk/", "kind": "eligibility_home", "readable": true, "status": 200, "reader": "ordinary HTTP" }, { "url": "https://datagrc.co.uk/gdpr-virtual-outsourced-dpo-data-protection-officer/", "kind": "main_service", "readable": true, "status": 200, "reader": "ordinary HTTP" } ], "observations": { "price": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set.", "price_scope": "not_established" }, "setup": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "term": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "allowance": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "contact": { "state": "published", "scope": "explicit_inclusion", "note": "Named senior DPO described.", "source_url": "https://datagrc.co.uk/gdpr-virtual-outsourced-dpo-data-protection-officer/", "checked_on": "2026-10-17" }, "cover": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "availability": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "monitoring": { "state": "published", "scope": "capability", "note": "Regular governance meetings described.", "source_url": "https://datagrc.co.uk/gdpr-virtual-outsourced-dpo-data-protection-officer/", "checked_on": "2026-10-17" }, "rights": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "breach": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "training": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "software": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." } } }, { "provider_id": "sme-comply", "name": "SME Comply", "eligibility_basis": "UK presence or UK-facing service", "checked_pages": [ { "url": "https://smecomply.co.uk/", "kind": "eligibility_home", "readable": true, "status": 200, "reader": "ordinary HTTP" }, { "url": "https://smecomply.co.uk/dpo-as-a-service/", "kind": "main_service", "readable": true, "status": 200, "reader": "ordinary HTTP" } ], "observations": { "price": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set.", "price_scope": "not_established" }, "setup": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "term": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "allowance": { "state": "published", "scope": "qualified", "note": "Shared legal and DPO allowance, not four hours reserved entirely for DPO work.", "source_url": "https://smecomply.co.uk/dpo-as-a-service/", "checked_on": "2026-10-17" }, "contact": { "state": "published", "scope": "capability", "note": "DPO designated during onboarding; evidence excerpt reviewed below.", "source_url": "https://smecomply.co.uk/dpo-as-a-service/", "checked_on": "2026-10-17" }, "cover": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "availability": { "state": "published", "scope": "qualified", "note": "Breach guidance availability; not response time.", "source_url": "https://smecomply.co.uk/dpo-as-a-service/", "checked_on": "2026-10-17" }, "monitoring": { "state": "published", "scope": "capability", "note": "Ongoing audit/reviews and meetings described.", "source_url": "https://smecomply.co.uk/dpo-as-a-service/", "checked_on": "2026-10-17" }, "rights": { "state": "published", "scope": "capability", "note": "Rights-request guidance described.", "source_url": "https://smecomply.co.uk/", "checked_on": "2026-10-17" }, "breach": { "state": "published", "scope": "capability", "note": "Incident guidance described.", "source_url": "https://smecomply.co.uk/dpo-as-a-service/", "checked_on": "2026-10-17" }, "training": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "software": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." } } }, { "provider_id": "forvis-mazars", "name": "Forvis Mazars", "eligibility_basis": "UK presence or UK-facing service", "checked_pages": [ { "url": "https://www.forvismazars.com/uk/en/services/consulting/technology-and-digital-consulting/data-and-digital-advisory", "kind": "initial_service", "readable": true, "status": 200, "reader": "ordinary HTTP" }, { "url": "https://www.forvismazars.com/uk/en/services/consulting/technology-and-digital-consulting/data-and-digital-advisory/data-privacy-advisory", "kind": "main_service", "readable": true, "status": 200, "reader": "ordinary HTTP" } ], "observations": { "price": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set.", "price_scope": "not_established" }, "setup": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "term": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "allowance": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "contact": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "cover": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "availability": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "monitoring": { "state": "unclear", "scope": "not_established", "note": "Registered DPO service is explicit, but other privacy advisory capabilities are not clearly assigned to that package." }, "rights": { "state": "unclear", "scope": "not_established", "note": "Registered DPO service is explicit, but other privacy advisory capabilities are not clearly assigned to that package." }, "breach": { "state": "unclear", "scope": "not_established", "note": "Registered DPO service is explicit, but other privacy advisory capabilities are not clearly assigned to that package." }, "training": { "state": "unclear", "scope": "not_established", "note": "Registered DPO service is explicit, but other privacy advisory capabilities are not clearly assigned to that package." }, "software": { "state": "unclear", "scope": "not_established", "note": "Registered DPO service is explicit, but other privacy advisory capabilities are not clearly assigned to that package." } } }, { "provider_id": "ametros-group", "name": "Ametros Group", "eligibility_basis": "UK presence or UK-facing service", "checked_pages": [ { "url": "https://ametrosgroup.com/landing/outsourced-dpo-services/", "kind": "initial_service", "readable": true, "status": 200, "reader": "ordinary HTTP" }, { "url": "https://ametrosgroup.com/prices/", "kind": "linked_pricing", "readable": true, "status": 200, "reader": "ordinary HTTP" }, { "url": "https://ametrosgroup.com/services/outsourced-dpo/", "kind": "main_service", "readable": true, "status": 200, "reader": "ordinary HTTP" }, { "url": "https://ametrosgroup.com/prices-2/", "kind": "linked_pricing", "readable": false, "status": 200, "reader": "ordinary HTTP" } ], "observations": { "price": { "state": "published", "scope": "qualified", "note": "Published range covers fractional and outsourced roles including DPOs, vCISOs and compliance managers. Not a DPO-only tariff or like-for-like comparison.", "source_url": "https://ametrosgroup.com/prices/", "checked_on": "2026-10-17", "price_scope": "mixed_fractional_roles" }, "setup": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "term": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "allowance": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "contact": { "state": "published", "scope": "qualified", "note": "Role depends on scope and legal requirement.", "source_url": "https://ametrosgroup.com/services/outsourced-dpo/", "checked_on": "2026-10-17" }, "cover": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "availability": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "monitoring": { "state": "published", "scope": "capability", "note": "Retained-service capability.", "source_url": "https://ametrosgroup.com/services/outsourced-dpo/", "checked_on": "2026-10-17" }, "rights": { "state": "published", "scope": "qualified", "note": "Can be included in retainer or bought separately; contract-dependent.", "source_url": "https://ametrosgroup.com/services/outsourced-dpo/", "checked_on": "2026-10-17" }, "breach": { "state": "published", "scope": "qualified", "note": "Can be included in retainer or bought separately; contract-dependent.", "source_url": "https://ametrosgroup.com/services/outsourced-dpo/", "checked_on": "2026-10-17" }, "training": { "state": "published", "scope": "separate", "note": "Listed as a complementary add-on, not an included DPO entitlement.", "source_url": "https://ametrosgroup.com/prices/", "checked_on": "2026-10-17" }, "software": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." } } }, { "provider_id": "gdpr-advisor", "name": "GDPR Advisor (PSA Professional Solutions)", "eligibility_basis": "UK presence or UK-facing service", "checked_pages": [ { "url": "https://www.gdpradvisor.co.uk/outsourced-dpo-data-protection-officer-services", "kind": "initial_service", "readable": true, "status": 200, "reader": "ordinary HTTP" } ], "observations": { "price": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set.", "price_scope": "not_established" }, "setup": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "term": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "allowance": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "contact": { "state": "published", "scope": "explicit_inclusion", "note": "Primary and secondary described.", "source_url": "https://www.gdpradvisor.co.uk/outsourced-dpo-data-protection-officer-services", "checked_on": "2026-10-17" }, "cover": { "state": "published", "scope": "explicit_inclusion", "note": "Provider promise, not independently tested delivery.", "source_url": "https://www.gdpradvisor.co.uk/outsourced-dpo-data-protection-officer-services", "checked_on": "2026-10-17" }, "availability": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "monitoring": { "state": "published", "scope": "explicit_inclusion", "note": "Monthly review in SME package.", "source_url": "https://www.gdpradvisor.co.uk/outsourced-dpo-data-protection-officer-services", "checked_on": "2026-10-17" }, "rights": { "state": "published", "scope": "explicit_inclusion", "note": "Handling described in SME package.", "source_url": "https://www.gdpradvisor.co.uk/outsourced-dpo-data-protection-officer-services", "checked_on": "2026-10-17" }, "breach": { "state": "published", "scope": "explicit_inclusion", "note": "Breach response described in SME package.", "source_url": "https://www.gdpradvisor.co.uk/outsourced-dpo-data-protection-officer-services", "checked_on": "2026-10-17" }, "training": { "state": "published", "scope": "qualified", "note": "Enterprise package training.", "source_url": "https://www.gdpradvisor.co.uk/outsourced-dpo-data-protection-officer-services", "checked_on": "2026-10-17" }, "software": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." } } }, { "provider_id": "bird-and-bird-llp-uk", "name": "Bird & Bird Privacy Solutions", "eligibility_basis": "UK presence or UK-facing service", "checked_pages": [ { "url": "https://www.twobirds.com/en", "kind": "eligibility_home", "readable": true, "status": 200, "reader": "ordinary HTTP" }, { "url": "https://www.twobirds.com/-/media/new-website-content/pdfs/capabilities/privacy-and-data-protection/bbps-dpo-services-brochure.pdf", "kind": "service_brochure", "readable": true, "status": 200, "reader": "ordinary HTTP" } ], "observations": { "price": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set.", "price_scope": "not_established" }, "setup": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "term": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "allowance": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "contact": { "state": "published", "scope": "explicit_inclusion", "note": "Dedicated lawyer or adviser described.", "source_url": "https://www.twobirds.com/-/media/new-website-content/pdfs/capabilities/privacy-and-data-protection/bbps-dpo-services-brochure.pdf", "checked_on": "2026-10-17" }, "cover": { "state": "published", "scope": "explicit_inclusion", "note": "Other specialists can cover.", "source_url": "https://www.twobirds.com/-/media/new-website-content/pdfs/capabilities/privacy-and-data-protection/bbps-dpo-services-brochure.pdf", "checked_on": "2026-10-17" }, "availability": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "monitoring": { "state": "published", "scope": "capability", "note": "Planning, compliance health checks and ongoing reviews described.", "source_url": "https://www.twobirds.com/-/media/new-website-content/pdfs/capabilities/privacy-and-data-protection/bbps-dpo-services-brochure.pdf", "checked_on": "2026-10-17" }, "rights": { "state": "published", "scope": "qualified", "note": "Complex queries supported; lower-risk requests may remain with internal staff.", "source_url": "https://www.twobirds.com/-/media/new-website-content/pdfs/capabilities/privacy-and-data-protection/bbps-dpo-services-brochure.pdf", "checked_on": "2026-10-17" }, "breach": { "state": "published", "scope": "capability", "note": "Advice and severity assessment described.", "source_url": "https://www.twobirds.com/-/media/new-website-content/pdfs/capabilities/privacy-and-data-protection/bbps-dpo-services-brochure.pdf", "checked_on": "2026-10-17" }, "training": { "state": "published", "scope": "capability", "note": "Staff workshops described.", "source_url": "https://www.twobirds.com/-/media/new-website-content/pdfs/capabilities/privacy-and-data-protection/bbps-dpo-services-brochure.pdf", "checked_on": "2026-10-17" }, "software": { "state": "published", "scope": "qualified", "note": "DPO Dashboard can be used; confirm commercial inclusion.", "source_url": "https://www.twobirds.com/-/media/new-website-content/pdfs/capabilities/privacy-and-data-protection/bbps-dpo-services-brochure.pdf", "checked_on": "2026-10-17" } } }, { "provider_id": "mishcon-de-reya-llp", "name": "Mishcon de Reya LLP", "eligibility_basis": "UK presence or UK-facing service", "checked_pages": [ { "url": "https://www.mishcon.com/products/mishcon-dpo", "kind": "initial_service", "readable": true, "status": 200, "reader": "ordinary HTTP" } ], "observations": { "price": { "state": "published", "scope": "qualified", "note": "Starting price plus VAT, not a complete universal quote.", "source_url": "https://www.mishcon.com/products/mishcon-dpo", "checked_on": "2026-10-17", "price_scope": "dpo_specific" }, "setup": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "term": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "allowance": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "contact": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "cover": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "availability": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "monitoring": { "state": "unclear", "scope": "not_established", "note": "Compliance plan and policy review are described, but an ongoing monitoring or audit schedule is not explicit in the checked page." }, "rights": { "state": "published", "scope": "capability", "note": "Request help described.", "source_url": "https://www.mishcon.com/products/mishcon-dpo", "checked_on": "2026-10-17" }, "breach": { "state": "published", "scope": "capability", "note": "Incident support described.", "source_url": "https://www.mishcon.com/products/mishcon-dpo", "checked_on": "2026-10-17" }, "training": { "state": "published", "scope": "capability", "note": "Prerecorded training described.", "source_url": "https://www.mishcon.com/products/mishcon-dpo", "checked_on": "2026-10-17" }, "software": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." } } }, { "provider_id": "verasafe", "name": "VeraSafe, LLC", "eligibility_basis": "UK presence or UK-facing service", "checked_pages": [ { "url": "https://verasafe.com/managed-services/dpo-services/", "kind": "initial_service", "readable": false, "status": 403, "reader": "ordinary HTTP" }, { "url": "https://verasafe.com/managed-services/dpo-services/", "kind": "main_service", "readable": true, "status": null, "reader": "web.run original-page reader, turn252view0; reported crawl today. Normal HTTP reader was 403." } ], "observations": { "price": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set.", "price_scope": "not_established" }, "setup": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "term": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "allowance": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "contact": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "cover": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "availability": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "monitoring": { "state": "published", "scope": "capability", "note": "Ongoing oversight described.", "source_url": "https://verasafe.com/managed-services/dpo-services/", "checked_on": "2026-10-17" }, "rights": { "state": "unclear", "scope": "not_established", "note": "The page describes records that streamline rights requests and data-subject contact, but does not expressly define request-handling support." }, "breach": { "state": "published", "scope": "capability", "note": "Breach advice, no numerical response deadline.", "source_url": "https://verasafe.com/managed-services/dpo-services/", "checked_on": "2026-10-17" }, "training": { "state": "published", "scope": "capability", "note": "Staff workshops described.", "source_url": "https://verasafe.com/managed-services/dpo-services/", "checked_on": "2026-10-17" }, "software": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." } } }, { "provider_id": "bd-emerson", "name": "BD Emerson LLC", "eligibility_basis": "International service explicitly covering UK GDPR; no claim of a UK office.", "checked_pages": [ { "url": "https://www.bdemerson.com/service/dpo-as-a-service", "kind": "main_service", "readable": true, "status": 200, "reader": "ordinary HTTP" }, { "url": "https://www.bdemerson.com", "kind": "eligibility_home", "readable": true, "status": 200, "reader": "ordinary HTTP" }, { "url": "https://www.bdemerson.com/service/virtual-data-protection-officer", "kind": "eligibility_service", "readable": true, "status": 200, "reader": "ordinary HTTP" } ], "observations": { "price": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set.", "price_scope": "not_established" }, "setup": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "term": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "allowance": { "state": "unclear", "scope": "not_established", "note": "Flat monthly fee and no hourly meter are described, but there is no numerical allowance or express unlimited scope." }, "contact": { "state": "published", "scope": "explicit_inclusion", "note": "Named officer appointed and registered; UK GDPR expressly within service scope.", "source_url": "https://www.bdemerson.com/service/dpo-as-a-service", "checked_on": "2026-10-17" }, "cover": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "availability": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." }, "monitoring": { "state": "published", "scope": "capability", "note": "Ongoing monitoring and policy upkeep described.", "source_url": "https://www.bdemerson.com/service/dpo-as-a-service", "checked_on": "2026-10-17" }, "rights": { "state": "published", "scope": "capability", "note": "Rights-request handling described.", "source_url": "https://www.bdemerson.com/service/dpo-as-a-service", "checked_on": "2026-10-17" }, "breach": { "state": "published", "scope": "capability", "note": "Breach response described. Provider legal generalisations are not adopted as legal facts.", "source_url": "https://www.bdemerson.com/service/dpo-as-a-service", "checked_on": "2026-10-17" }, "training": { "state": "published", "scope": "capability", "note": "Training appears in service introduction; entitlement detail to agree.", "source_url": "https://www.bdemerson.com/service/dpo-as-a-service", "checked_on": "2026-10-17" }, "software": { "state": "not_found_in_checked_pages", "scope": "not_established", "note": "No qualifying statement found in the defined checked page set." } } } ], "public_url": "https://theassurancedesk.com/data/outsourced-dpo-study-2026-10.json", "method": "Directory descriptions screened first. Original pages then checked for ongoing DPO appointments with UK presence or explicit UK GDPR coverage. One distinct provider is one unit. Up to four substantive service, pricing or terms pages per provider, plus eligibility navigation and failed reads. Twelve fields coded with exact saved passages and qualifications; two passes by the same editor. Counts describe information in those pages, not the entire market or service quality.", "sensitivity": { "reason": "One international provider was included on explicit UK GDPR service coverage; this checks the effect of excluding that record. This does not independently establish every other provider domicile.", "excluded_id": "bd-emerson", "denominator": 24, "published_observations": { "price": 3, "setup": 1, "term": 5, "allowance": 3, "contact": 18, "cover": 5, "availability": 3, "monitoring": 20, "rights": 18, "breach": 19, "training": 15, "software": 6 }, "dpo_specific_price_count": 2 }, "identity_disclosures": { "grci-law": { "directory_name": "GRCI Law", "study_name": "GRC Solutions (formerly GRCI Law / IT Governance)", "reason": "Current GRC Solutions service, consolidating GRCI Law and IT Governance. Both original capture sets retained." }, "bird-and-bird-llp-uk": { "directory_name": "Bird & Bird LLP", "study_name": "Bird & Bird Privacy Solutions", "reason": "The DPO service is delivered under the Privacy Solutions name in the original service brochure; one provider record." } } }