Frequently asked questions

RiskSignal uses a structured set of questions to help you map how personal data is handled across your business, then turns what you describe into a clear written account you can use when someone asks. It is relevant to GDPR but is not a compliance assessment.

For agencies, consultants, recruiters, and freelancers who handle client data as part of normal work — and need to account for it clearly when someone asks.

Most useful when a client asks how you handle their data, a contract requires your processes in writing, you're adding a tool or vendor and want to know what that means for your data, or you want to stop assuming and actually know where your business stands.

Most independent businesses handle data as part of everyday work without ever stopping to describe it as a whole. When a client asks, the trouble is usually not knowing where to begin.

RiskSignal turns that into a single written snapshot. Answer a short set of questions about how your business operates and you get a plain description of how data moves through your work. Something you can refer to, share, or build on.

You can. But structure helps in two ways.

First, the questions cover dimensions most businesses have never examined directly: how clearly data handling is shared across the team, how tools affect visibility, who actually makes decisions when something unusual comes up. Without prompting, those areas tend to get skipped.

Second, articulating it clearly is harder than knowing it roughly. The questions force specificity: not 'we handle data carefully' but 'responsibility sits with one person who is rarely available when clients ask.' That specificity is what makes the snapshot useful.

The snapshot focuses on how data handling is understood and carried out in practice. It looks at how personal data moves across tools and services, how responsibility for data decisions is held, how consistently that understanding is shared across the people involved, and how closely day-to-day practices reflect what is documented.

It does not review documentation, perform technical testing, or make any determination about regulatory compliance.

The snapshot typically takes under 5 minutes to complete.

No. It describes how data handling works in your business — for your own reference. Not a regulatory determination.

No. Most people use it before speaking to a solicitor or DPO — so that conversation starts from a clear picture, not a blank one.

A structured set of questions first helps you map how data actually moves through your work. What comes back is a clear written account of those patterns, in language you can use when a client, contract, or conversation requires it.

No score or category is shown. The output is based entirely on your responses.

Best as an internal reference: to start a conversation, brief a colleague, or prepare for a client question.

Use results to prompt discussion and identify where further clarity may be needed; they are not definitive conclusions.

Yes. The snapshot reflects how your business runs when you finish. If your tools, team, or client work changes a lot, a new snapshot will reflect how things look then.

Each snapshot is a separate purchase.

The questions cover what most businesses skip when thinking about this on their own. What comes back is a written account you can actually use: in a conversation, a contract, or a meeting with a solicitor. £39. One purchase. Ready when you finish.

£39 in the UK. Single purchase, no subscription. Payment is taken at the end of the assessment (see below). Also available for businesses in Ireland (€39).

Stripe processes payment. RiskSignal does not store full payment card details.

If you experience a technical issue that prevented you from receiving your snapshot, contact support@risksignal.co and we will resolve it. Other refund requests are considered on a case-by-case basis.

Responses are framed around business practices, not personal data. No personal information is requested; no account or ongoing profile is created.

Stripe handles payment. Further details are on the Privacy page.

Your snapshot is available for 30 days from the date of purchase. After 30 days, your submission data is permanently deleted. We recommend downloading or saving your snapshot shortly after you receive it.

It fits common day-to-day data-handling patterns for agencies, consultancies, and freelancers. Best when client data is part of normal work.

For highly specialised processing or complex regulatory needs, specialist advice is appropriate.

See the Methodology page for approach and scope.