Data strategy and governance
Who owns which data, where it is allowed to go, and how that is enforced rather than merely written down.
When this is the right assessment
- Someone asked where personal data is held and the answer took a week.
- Everyone has access to everything, because restricting it would break something.
- Retention is whatever the last administrator happened to configure.
What it covers
- Ownership and classification policy
- Retention and access rules
- UAE PDPL readiness review
What you will know afterwards
An inventory of what data exists, where it sits and who is accountable for it.
Classification and retention rules written to be enforceable rather than aspirational.
A readiness view against the UAE Personal Data Protection Law, with the gaps ranked.
Questions we get asked
- Is this legal advice?
- No. We assess and design how data is handled technically. Confirming your obligations under the law is for a UAE legal adviser.
- Do we need Anyway Classify for this?
- No. The product automates discovery and labelling; the governance work stands on its own, and Classify is in early access in any case.
- Can you do this without seeing our data?
- Largely. Most of the work concerns structures, owners and rules. Where sample data is needed it stays inside your environment.
Other advisory work
- IT strategy and digital transformation
- Cloud advisory and migration
- Solution and enterprise architecture
- Security and compliance advisory
Advisory work sits under our Information Technology Consultants licence. Building what an assessment recommends sits under Services, and keeping it healthy afterwards under Application Support.
Start with an assessment.
A 30-minute call first, at no cost, to work out whether an assessment is the right starting point at all.