Frequently asked questions

RiskSignal provides a GDPR Risk Snapshot — a structured assessment of how personal data is handled in day-to-day work, and where uncertainty or inconsistency may exist under GDPR or UK GDPR.

The same audience: marketing agencies, digital consultancies, and freelancers handling personal data on behalf of clients.

Most useful when a client asks about data handling, a contract requires a written description of data processes, or you are onboarding a new tool or vendor and want to understand what that affects.

The snapshot focuses on how data handling is understood and carried out in practice. It looks at how personal data moves across tools and services, how responsibility for data decisions is held, how consistently that understanding is shared across the people involved, and how closely day-to-day practices reflect what is documented.

It does not review documentation, perform technical testing, or make any determination about regulatory compliance.

The snapshot typically takes under 5 minutes to complete.

No. The snapshot does not certify compliance, assign a compliance status, or provide a formal regulatory assessment.

It describes how data handling operates in your business and where understanding may depend on context or individual knowledge — for your own use, not as a legal or regulatory determination.

No. RiskSignal does not provide legal advice. The snapshot is an informational input to support internal understanding and decision-making.

Many users find it useful before involving a solicitor or DPO, so you have a clear picture of your situation before that conversation.

A written document describing how personal data handling operates in your business — where understanding appears consistent and where it may depend on context or individual knowledge.

No score or category is shown; the output is based entirely on your responses.

Best as an internal reference: to start a conversation, brief a colleague, or prepare for a client question.

Use results to prompt discussion and identify where further clarity may be needed; they are not definitive conclusions.

Yes. The snapshot reflects how your business operates at the time of completion. If your tools, team, or client work changes significantly, a new snapshot will reflect the updated picture.

Each snapshot is a separate purchase.

€39 in Ireland and £35 in the UK — single purchase, no subscription. Payment is taken at the end of the assessment (see below).

Stripe processes payment. RiskSignal does not store full payment card details.

If you experience a technical issue that prevented you from receiving your snapshot, contact support@risksignal.co and we will resolve it. Other refund requests are considered on a case-by-case basis.

Responses are framed around business practices, not personal data. No personal information is requested; no account or ongoing profile is created.

Stripe handles payment. Further details are on the Privacy page.

Your snapshot is available for 30 days from the date of purchase. After 30 days, your submission data is permanently deleted. We recommend downloading or saving your snapshot shortly after you receive it.

It fits common day-to-day data-handling patterns for agencies, consultancies, and freelancers — best where client data is handled regularly as part of normal work.

For highly specialised processing or complex regulatory needs, specialist advice is appropriate.

See the Methodology page for approach and scope.