We start with what already exists and develop an organisation from it that can be maintained in everyday work. Scope and approach are agreed before we begin.
We record the starting position, company structure, systems in use and documentation that already exists. At the end of this step there is a shared picture of what exists and what is missing.
Requirements, responsibilities and open measures are arranged transparently and prioritised. You can see which points to address first and why.
Together with the people responsible we develop working drafts, processes and technical measures and support the documentation. Review and approval of the results remain with the company; where legal clarification is needed outside a DPO mandate, separate legal advice is required.
On request we support ongoing maintenance, training and the further development of the organisation. From October 2026 the portal can carry that work between appointments.
Clear responsibilities, traceable tasks, consistent documentation and reliable records — plus a realistic path for further implementation. Scope and approach are agreed before we begin.
In the initial conversation we clarify where action is needed and what scope is realistic — non-binding and with no preparation required on your side.
Arrange a conversationCAYADA is a compliance and technology company, not a law firm. Advice provided under a DPO mandate falls within the scope of Art. 39 GDPR. Legal advice beyond that scope and legal representation are not part of the CAYADA offering.