Free to keep the records.
Paid to run the practice.

Not time-limited, and the registers are not cut down. Every register is in it — clients, requests, ROPA, DPIAs, breaches, vendors, the statutory clock and the compliance calendar — for as long as you want it, with no trial clock and no cap on clients or records. What is not in it is the practice layer above the registers: the client workspace, Data Protection Health, client reports and evidence packs, guided onboarding, the annual review, the client inbox and the practice figures. That is the line between the two, and we would rather draw it here than let you find it later. The AI assistant is built but not available on any plan; when it ships it will be on the paid plans too, because every question costs us money at a model provider rather than being a switch we flipped.

The practice layer, and somewhere for the workspace to live. The registers record the work; the paid plans are what you run a practice from — a workspace for each client instead of nine lists filtered nine ways, Data Protection Health with every figure showing its working, client reports and evidence packs ready to send, guided onboarding, the annual review, the client inbox, and the figures that say how the book is running. We also hold your encrypted workspace so it opens on any browser or device you sign in from, and back it up so you do not have to remember to. When the AI assistant ships we carry its running cost. Plus a support answer inside two working days from someone who does this work, templates and statutory citations revised as the law moves, and the Article 28 contract and VAT invoice a real business needs.

Your choice, and the answer differs. On the free plan it is on your own device and nowhere else — we hold no copy at all. On a paid plan we also hold the encrypted workspace in a UK/EU region so it can reach your other devices, and we cannot read it: the key is derived from your password and never leaves your machine. The security page sets out both positions in full, including what neither protects against.

It is not available yet, so today the answer is that it sees nothing at all. What follows is how it will work, published in advance so you can assess it before it ships.

Not their names, and nothing you have written. The tools the assistant uses run inside your own browser against your open workspace, and return a deliberately narrow result — a record type, an internal reference, a due date, a number of days. Names of data subjects and client organisations never leave your device; the names you read in an answer are substituted back locally after it arrives. Neither we nor the model provider retain any of it. It will be off unless you switch it on, and the security page shows you how to watch the traffic and check all of this yourself.

No, on any plan. Add as many client organisations as you advise and as many records as the work produces. What differs between plans is the practice layer above the registers — the client workspace, the reporting, the chasing and the practice figures — whether we sync the workspace for you, and how many people are covered: five on Practice, one on Practitioner.

Always, and there is nothing to prise loose — we could not read it even if we wanted to keep it. Export the full workspace as open JSON, or individual records as PDF, Word and Excel, on every plan. Stop paying and the workspace keeps working on your own machine; syncing stops, the records do not.

Not today — you run the workspace and send what you choose. The client portal is in build, and the reason it is taking a while is worth knowing: we store your workspace as a blob we cannot read, so a portal where our server decided what a client may see would mean our server holding readable client data. It has to be a second, smaller, separately encrypted artefact your own browser produces. The permission model for it is already in the app, so you can decide and inspect exactly what each client would be able to see before anything is ever published. It will be included on the Practice tier when it ships.

Monthly rolling, with no minimum term. Move between tiers or cancel whenever your book changes, and the workspace keeps working on your own machine either way.