![Consultor[IA] ISO 4.0](../assets/img/logo.webp){kind=logo}
Information security and privacy: ISO 27001, 27701 and LGPD
A digital fortress for your company's most valuable asset: data. Implementation, compliance, DPO as a Service and certification readiness — from the team that prepared the 2nd company in Brazil to be certified to ISO 27701.
Everything your auditor, your customer or the regulator may ask for
From assessment to certification
- Maturity assessment, gap analysis and compliance plan
- Full ISMS / PIMS implementation
- Risk analysis and treatment (ISO 27005 / ISO 27557)
- Data mapping, legal bases and consent management
- DPIA — Data Protection Impact Assessment
- Policies, privacy notices and terms of use
- Vendor contract review (DPA)
- Internal audit and support during the certification audit
- Security culture and team awareness
DPO as a Service
Data Protection Officer under art. 41 of the LGPD: data subject requests, incident management, liaison with the ANPD and ongoing support for the privacy program.
Affordable privacy
Consulting for small businesses focused on data governance and LGPD, with proportional scope and investment.
Mentoring for partners
Technical support and complete solutions for consultants working in information security. Learn more →
Straight answers
What's the difference between ISO 27001 and ISO 27701?
ISO 27001 structures the Information Security Management System (ISMS). ISO 27701 is its privacy extension (PIMS), covering the processing of personal data by controllers and processors — closely aligned with Brazil's LGPD and the GDPR.
What is DPO as a Service?
It is the outsourcing of the Data Protection Officer role (art. 41 of the LGPD): handling data subject requests, liaising with the ANPD (Brazil's data protection authority), incident management, internal guidance and maintaining the privacy program.
Do small businesses need to comply with the LGPD?
Yes, with obligations proportional to their size and risk. We have a consulting line for small businesses focused on data governance and LGPD, at an accessible investment.
Do you cover TISAX and SOC 2?
Yes. We cover TISAX (VDA ISA) for the automotive supply chain, SOC 2, ISO 22301, ISO 20000-1, ISO 27017/27018, NIST CSF, SP 800-53 and CIS Controls.
Related solutions
Is your data really protected?
A maturity assessment reveals the gaps and the path to certification.