An extension of ISO 27001 for full GDPR compliance.
ISO 27701:2019 adds a Privacy Information Management System (PIMS) to your ISMS, demonstrating compliance with the GDPR.
Organisations processing personal data at scale.
Yes. ISO 27701 is an extension of ISO 27001 and requires an existing or simultaneously implemented ISMS.
It is the most complete technical proof of compliance. We combine it with the legal/organisational GDPR requirements for comprehensive coverage.
Typically 2–4 months, depending on your size, complexity and maturity. We give you a clear timeline from the start.
The cost depends on the size of your business and the scope of the project. The initial assessment is free and you receive a transparent quote with no hidden charges. The consultant fee and the certification body fee are clearly separated.
The certificate is valid for 3 years, with annual surveillance audits by the body. We support you throughout so you maintain compliance with no stress.
No — we are independent consultants. We prepare you impartially and stand by you at the audit by any accredited body of your choice.
Absolutely. We tailor the system to be practical and lightweight, with no unnecessary bureaucracy — it works equally well for small and large companies.
Yes. The cost of ISO certification is an eligible expense in many ΕΣΠΑ programmes for SMEs, so a significant part can be covered by a grant. We inform you of active programmes and the funding rate.
Book a free initial assessment. We will analyse your needs and recommend the optimal standard and timeline.