THE UMBRELLA
Audit Trail & Governance
Every change logged with who, when and what it was before. The boring system that saves you in a dispute.
What we build
Every change to every record, logged forever: who, what, when, from where, and what it was before. GDPR tooling, retention rules and access reviews built in — the boring system that wins disputes and passes audits.
What is included
- Immutable audit history on every record
- Who changed what, when, and from where
- GDPR tooling — export, erase and consent
- Retention and deletion policies
- Periodic access reviews
- Evidence packs for auditors and insurers
Typical delivery: 4–6 weeks. Scope and delivery window are established in an assessment visit — we do not publish prices, because a real answer depends on what we find inside your business.
Who wins, and how
Your team
- "Who changed this?" takes ten seconds, not a witch hunt
- Honest mistakes are reversible — history is never lost
- GDPR requests handled with a tool, not a panic
Your leadership
- Disputes settled from the record, not from recollections
- Access reviews and retention policies run on schedule, evidenced
- Insurer and regulator questionnaires answered from strength
Your organisation
- A culture of accountability without a culture of blame
- Client data handled provably, not just promisedly
- Due diligence for bigger contracts passes first time
How delivery actually runs
Week 1 — We come and look
A Business Systems Analyst spends a day inside your business, sitting with the people who actually do the work.
Weeks 2–4 — We build in the open
You see working software every week, not a status report. What is wrong gets said early, while changing it is still cheap.
Week 5 — Your data moves across
Spreadsheets, the old system, the shared drive — migrated, reconciled and checked against what you had.
Week 6 — Go live, then stay live
Training for the people who will use it, then support that answers. We do not hand over a login and disappear.
What it connects to
Audit Trail & Governance is not an island. It shares records with:
- Single Sign-On & Access — One login for everything, and one place to switch it off the day somebody leaves.
- Compliance & Certification — Scheme requirements mapped to real evidence, with expiry dates that chase themselves.
- Data Layer & Sync — One customer, one record. The single source of truth that makes every dashboard downstream worth believing.