v1.0
First published version of our method
What it covers
- Four moves on every engagement: map the data, rate each risk on one scale, write one standardized report, and review it for regulator readiness before it ships
- One privacy impact assessment skeleton, from executive summary to residual risk and sign-off, with risks rated High, Moderate or Low
- For AI agents: five lenses (reach, manipulation, autonomy, personal information, the stop), a permission matrix (needed vs granted), a five-stop evidence table and behaviour tests at user acceptance
Why
We publish the method so a reviewer can see what we check before they hire us, and see every change we make from here on.