ComplianceOS
Turns a business's real details into GDPR documents that stay current.
Guidance, risk findings and document packs generated from structured inputs — not a template with the logo swapped.
The problem
Small businesses get sold either a £3,000 consultant or a PDF template that was out of date before it finished downloading. Neither leaves them with a record of how they actually handle data.
What it does
- Interviews the business in plain English about what data it holds and why
- Validates every answer against a typed schema before anything is generated
- Produces a privacy notice, processing record and retention schedule as views of that data
- Flags gaps and risks with the reason, not a score
- Regenerates every document when one answer changes
How it’s built
Architecture — Next.js · TypeScript · Zod · Deterministic rules
Decisions & trade-offs
A deterministic rules engine, not an LLM, for legal conclusions
A hallucinated lawful basis is a liability, not a bug. Compliance logic is explicit, versioned and testable; the model is not in the decision path.
Documents are views, never stored copies
Change the register once and every document follows. Stale copies are the whole problem with template-based compliance.
What it doesn’t do
- It produces records and tooling, not legal advice.
- It covers UK GDPR — not CCPA, not EU-specific national derogations.
- It cannot tell you whether a lawful basis is the right choice for an unusual business model. That needs a solicitor.
Source is private. The architecture, decisions and limits above are the honest version of what it is.
Start here
Tell me what's eating your time.
No pitch deck, no “discovery call” funnel. Tell me the problem and I'll tell you honestly whether it's worth building — including when the answer is “don't bother”.
What happens next
- 01
You tell me the problem
A few sentences is plenty. No form maze, no discovery call funnel.
- 02
I reply within one working day
With an honest read on whether it's worth building — including when it isn't.
- 03
A fixed scope and a fixed price
Before any work starts, so you know exactly what you're getting and what it costs.