Services
Where is your data?
A map of your cloud and SaaS services: where your data sits, who can reach it and what your exit path is.
For whom
SMEs, schools, care institutions and local governments running on US or other cloud providers.
Why now
- The EU-US Data Privacy Framework remains legally contested; organisations must be able to show what their transfers rely on.
- European sovereign cloud offerings and the revision of the EU Cybersecurity Act make a deliberate choice possible, but only once you know where you stand.
What you get
- Overview of your cloud and SaaS services with regions, subprocessors and data categories.
- Analysis of transfers outside the EU and a draft transfer impact assessment (TIA) per relevant provider.
- Assessment of exposure to foreign access (including the US CLOUD Act).
- Exit path and alternatives per critical service, with the dependencies.
- One-hour debrief.
Not included
- Legal advice and drafting or signing data processing agreements; for that I work with your lawyer.
- Migration or configuration of services.
Frequently asked questions
- Do you need access to our systems?
- No. I work from your list of services, your contracts and the providers' public documentation. Where something is unclear, I ask you.
- Can this be combined with a DPIA?
- Yes. The map of your data flows is a good basis for a DPIA; combining lowers the price.