TSI AUDITS / PRIVACY & PURPOSE
Does the system do only what was authorised?
Turn privacy commitments into controls your team can inspect.
WHEN THIS AUDIT MATTERS
Policies describe what should happen. You need to check what the architecture enforces.
WHAT WE EXAMINE
A defined system.
A specific question.
One defined processing workflow, its purposes, permissions and retention.
- Map declared purposes to actual processing and destinations.
- Review minimisation, access and retention controls.
- Check deletion and oversight against agreed requirements.
YOUR EVIDENCE PACKSomething to act on.
Something to act on.
Something to show.
01A processing and purpose map
02A technical gap register for privacy and legal review
03A prioritised repair plan and one scoped retest
Your report identifies tested scope, findings and untested areas.Know what you’re carrying. Decide what to do next.
The fee covers the agreed testing, evidence pack, readout and one scoped retest. Your team or a separately appointed provider carries out remediation.
Existing catalogue pricing for local review. Excludes VAT and travel. Exact scope and dates are agreed before booking.