Digital Compliance

AI Act Compliance

Digital Service Act (DSA) Compliance

NIS2 Compliance

DORA Compliance

Data Act Compliance

Cyber Resilience Act (CRA) Compliance

RODO

Ensure your company's compliance with the latest regulations

We implement compliance processes, help maintain cybersecurity and take care of secure AI in organizations.

We combine legal and technological expertise to provide practical and effective solutions.

We offer comprehensive support in the areas of implementing compliance processes, protecting cybersecurity and ensuring the safe use of artificial intelligence in organizations. We specialize in:

  • Implementing compliance processes – we audit existing systems and procedures, identify responsibilities, and create documentation and policies to manage compliance with the latest regulations.
  • Cyber security – we provide full protection of IT systems, implement risk management policies and contingency plans to ensure business continuity in case of incidents.
  • Secure AI – we help organizations deploy AI tools in a responsible, security and privacy compliant manner, ensuring compliance with Data Governance policies and preparing the organization for the challenges of generative AI.

Our clients' industries

New-tech / IoT sector Software houses Fuel and energy industry Automotive industry E-commerce Gamedev Creative industry TMT Start-ups Blockchain / crypto
Poprzedni
Następny
Strzałka

AI Act Compliance

  • We identify AI systems and tools in the organization
  • We help determine the responsibilities of various parties – from suppliers
    of AI systems to importers and distributors
  • We prepare documentation and implement internal processes under AI & Data Governance
  • We support the use of AI in decision-making and management processes

Scope of our services

  • opening audit – inventory of AI systems and tools
  • Overall risk assessment by process and tool – qualification into appropriate categories, scoping, assessment of compliance of facts with legal status, required / recommended corrective actions
  • Implementation of secure generative AI – principles for the safe use of AI tools like ChatGPT, DallE, Copilot, Midjourney in the organization from the point of view of cybersec, privacy and IP confidentiality
  • Data Governance – inventory of training data and data used in AI systems, including determining: categories of data and entities, actions taken on the data, and whether the purposes are in line with the executed information obligations and personal data policies prevailing in the organization
  • Preparation of AI Governance Policy, including:
    • Distribution of responsibilities within the organization and within the supply chain (personnel, subcontractors, suppliers, licensors),
    • risk management
    • data and quality management
    • Creation of documentation (technical and compliance)
    • logging of events
    • corrective actions and incident reporting
    • Post-market monitoring of AI systems
    • cyclical educational activities
    • monitoring compliance with policy

Digital Service Act (DSA) Compliance

  • We help verify that hosting services/products and web platforms are covered by DSA requirements
  • We support customers in enhancing online security and help implement obligations imposed on service providers, related to the ability to remove illegal or unacceptable content, cooperate with law enforcement authorities

Scope of our services

  • Update the terms of service (or prepare separate terms of service for all hosting services / web platforms)
  • Introduce mechanisms that will allow users to report illegal content and content that does not comply with the terms of service (notice&action – e.g., an interactive form or a dedicated email address)
  • Draw up a procedure for verifying notifications and justifying decisions related to illegal materials
  • In the case of online platforms, drawing up an internal system for handling complaints
  • Establish a system for collecting reports and recording all instances of content moderation

NIS2 Compliance

  • We help implement risk management policies, including incident risk estimation
  • We implement technical measures to ensure the security of IT systems
  • Support in ensuring the security and continuity of the supply chain of ICT processes, products and services
  • We implement procedures and contingency plans to restore IT systems in the event of a cyber attack
  • provide staff with cyber security training

Scope of our services

  • Audit of operations – verification of the necessity of NIS2/ UKSC regulations and identification of key processes implemented in the organization, mapping of IT systems and procedures for these processes
  • Verification of organizational, technical and legal solutions related to the organization’s cyber security, including identification of key third-party vendors
  • Support for the development or updating of relevant cyber security procedures and policies, in particular:
    • risk management policies
    • security and supply chain continuity policies
    • Vulnerability and incident management policies
    • internal cyber security regulations
  • Development of contractual clauses with suppliers, support in contract negotiations
  • cyclical verification and updating of the above documents.
  • Ongoing consulting and in-house training for staff and management

DORA Compliance

  • We support financial institutions in complying with DORA requirements
  • We help assess which areas of the business are affected by the regulation and design measures to ensure compliance with digital resilience regulations

Scope of our services

  • Audit of organization’s readiness for DORA implementation
  • Support in developing ICT risk management strategies
  • Verification of contracts with external suppliers (ICT third-party risk)
  • Advising on the development of contingency plans and business continuity policies
  • Preparation of internal documentation in accordance with DORA
  • Compliance and legal support in the incident reporting process

Forms of training

  • Training for management and IT/Compliance departments
  • Implementation workshops and industry case studies
  • Q&A sessions with DSK experts

Data Act Compliance

  • We help companies understand what obligations and opportunities the Data Act entails – both from the perspective of the data provider and the user
  • We work with clients to implement policies, contract models and data access rules

Scope of our services

  • Identification of the customer’s role on Data Act grounds (provider, user, processor)
  • Creating and reviewing regulations and agreements on data sharing
  • Advice on the design of data access mechanisms
  • Support in assessing compliance with Data Act regulations
  • Designing procedures for sharing and processing data between entities
  • Consulting for manufacturers of IoT-based devices and services

Cyber Resilience Act (CRA) Compliance

  • We help manufacturers, importers and distributors of digital products prepare for CRA requirements
  • We provide support in assessing whether a product is subject to the regulation and how to implement safety requirements at the organizational and product level

Scope of our services

  • Evaluation of duties under the CRA and classification of products
  • Support in designing and documenting product compliance
  • Preparation of declaration of conformity and technical documentation
  • Create vulnerability and incident reporting procedures
  • Consulting in the conformity assessment process (conformity assessment)
  • Review and update contracts with suppliers and business partners

RODO

  • We provide full support for the implementation of RODO, especially in the IT and newtech industries
  • We help map the organization’s personal data processing processes and identify risks and threats
  • We prepare RODO documentation tailored to the needs of the organization
  • We provide ongoing support in situations involving the processing and protection of personal data that require consultation

Scope of our services

  • Conducting a RODO compliance audit
  • Review and update current documentation
  • Creation of necessary documentation
  • Support in conducting a data protection impact assessment
  • Conduct a risk analysis related to data processing
  • Advice on the implementation of technical and organizational measures
  • Negotiation of agreements on cooperation in the processing of personal data
  • Support in fulfilling data subjects’ requests
  • Ongoing advice and consultation in situations involving personal data
  • Assist in handling data breach incidents
  • Support with proceedings before the DPA
  • Conducting training for staff at all levels, including management