Information protection
Sensitivity labels and data loss prevention rules — so sensitive content is classified before it leaks, not after.
1 user storyOpen
Domain
Governance & Compliance
How a customer protects sensitive content, governs their data across the platforms it lives on, maps their architecture to the regulations that apply, and proves to an auditor that it all holds together.
Everyday sub-domains
The standard conversations most organisations have within this domain.
Data governance
Microsoft Purview as the catalogue and "where did this number come from?" layer across Microsoft Fabric, Databricks, Snowflake, and other data platforms.
1 user storyOpen
Information lifecycle management
Deciding how long different kinds of content are kept, what gets archived, and what gets safely disposed of — managing information from creation to deletion.
1 user storyOpen
AI governance
EU AI Act readiness, AI risk register, model cards — governance of the AI estate at the organisation level. Separate from the day-to-day machine-learning lifecycle.
1 user storyOpen
Privacy and consent
Subject access requests under GDPR, consent management, privacy impact assessments — the everyday privacy work.
1 user storyOpen
Specialised sub-domains
Where the conversation needs custom adaptations — regulated, hybrid, or high-stakes.
Regulatory mapping
Mapping the customer's architecture, on a continuing basis, against the regulations that apply — DORA, NIS2, GDPR, HIPAA — so the answer is ready before the auditor asks.
1 user storyOpen
Risk management and assurance
Continuous compliance rather than once-a-year fire drills — Microsoft Compliance Manager as the running evidence layer for SOC 2, ISO 27001, PCI, and similar frameworks.
1 user storyOpen