# Data protection and information security from a single team. > External DPO, EU and UK Representative, ISO 27001, penetration tests and workshops for SMEs and corporate groups in Switzerland, the EU and the UK. Response within one business day, onboarding in two weeks. - Source: https://www.sidd.swiss/en/services - Language: en - Last updated: 2026-10-20 - Publisher: SIDD Institute for Data Protection and Data Security, a brand of Priverion GmbH, Zugerstrasse 32, 6340 Baar (ZG), Switzerland Services External DPO, EU and UK Representative, ISO 27001, penetration tests and workshops, for SMEs and corporate groups in Switzerland, the EU and the UK. Since 2017 92 % mandate renewal Reply < 24 h Frequently requested: DPO EU Representative ISO 27001 Pen test Architecture Review Vibe-Coding Review ## Our services Two areas, one accountability: legal compliance and technical security, from a single team. Pharma Healthcare Aviation Financial Services SaaS Startup [Innosuisse](https://www.innosuisse.admin.ch/) Consulting ### Artificial Intelligence Audits Secure by Design · AI-generated code Newfrom CHF 6'900 #### Security Architecture Review For SaaS, mid-sized and regulated companies: find design flaws before cloud migration, new build or enterprise questionnaire. Learn more Newfrom CHF 3'900 #### Vibe-Coding Security Review For founders, SMEs, agencies and investors: security and data protection for your AI app before go-live. Report from 5 working days. Learn more ### AI Governance Package Governance, audits, policies and contracts from one team Newfrom CHF 17'900 #### AI Governance Package For SMEs and mid-sized firms using AI: rules, security, data protection and contracts from one partner. Setup plus monthly mandate. Learn more Newfrom CHF 9'800 #### AI Governance Buildup For SMEs and mid-sized companies with an AI action plan. In 4–10 weeks you get roles, policies, training and contracts with evidence. Learn more Newfrom CHF 6'900 #### Security Architecture Review For SaaS, mid-sized and regulated companies: find design flaws before cloud migration, new build or enterprise questionnaire. Learn more Newfrom CHF 3'900 #### Vibe-Coding Security Review For founders, SMEs, agencies and investors: security and data protection for your AI app before go-live. Report from 5 working days. Learn more from CHF 500/month #### DPO mandate (external DPO) For companies that need a qualified data-protection function under the FADP and GDPR, as a mandate from CHF 500/month, on request also as EU DPO under Art. 37 GDPR. Learn more ### Industries Sector-specific compliance & security Fixed-fee entry #### Healthcare For hospitals, practices, EPR communities and MedTech: FADP, EPR law, EU AI Act, NIS2/critical-infrastructure reporting and ISO 27001, legally led and multilingual. Learn more Fixed-fee entry #### B2B SaaS providers For B2B SaaS vendors who want to win enterprise deals: ISO 27001, SOC 2, DPA, pen tests and a vCISO-run trust center that answers security questionnaires fast. Learn more Fixed-fee entry #### Financial services providers For banks, insurers, FinTechs and asset managers: FINMA resilience, DORA, ICT risk management, third-party risk and ISO 27001, legally led and multilingual. Learn more ### Data Protection Swiss DSG · EU GDPR · UK GDPR · EU AI Act from CHF 500/month #### Data Protection Advisors (Switzerland) For SMEs that need a qualified point of contact under the Swiss FADP, without hiring in-house. Learn more Fixed-fee project #### FADP Compliance (project) For SMEs that want to bring their data processing into FADP compliance: audit, documentation and training at a fixed fee. Learn more from CHF 500/month #### Data Protection Officers (EU) For companies required to appoint a DPO under Art. 37 GDPR, onboarded within two weeks. Learn more from CHF 500/year #### EU Representative (Art. 27 GDPR) For non-EU companies with EU customers, we receive regulator and data-subject requests on your behalf. Learn more from GBP 1,200/year #### UK Representative (UK GDPR) For providers processing UK personal data without a UK establishment, mandatory representation post-Brexit. Learn more from CHF 500/month #### AI Officer For companies that use AI and need responsible AI governance under the EU AI Act without creating a full-time position. Learn more from CHF 3'900 #### AI Governance Check For companies that want to know where they stand on AI compliance and which measures are needed in what order. Learn more Newfrom CHF 9'800 #### AI Governance Buildup For SMEs and mid-sized companies with an AI action plan. In 4–10 weeks you get roles, policies, training and contracts with evidence. Learn more Newfrom CHF 17'900 #### AI Governance Package For SMEs and mid-sized firms using AI: rules, security, data protection and contracts from one partner. Setup plus monthly mandate. Learn more #### Data Protection Workshop (SME) For teams building privacy capability in-house, one day, on-site or remote. Learn more ### Information Security ISO 27001 · NIS2 · DORA · AI Security Newfrom CHF 6'900 #### Security Architecture Review For SaaS, mid-sized and regulated companies: find design flaws before cloud migration, new build or enterprise questionnaire. Learn more Newfrom CHF 3'900 #### Vibe-Coding Security Review For founders, SMEs, agencies and investors: security and data protection for your AI app before go-live. Report from 5 working days. Learn more from CHF 500/month #### NIS2 Consulting For Swiss companies that supply EU customers: applicability analysis, gap analysis, ISMS and incident reporting, with management's personal liability in mind. Learn more #### ISMS (ISO 27001) consulting For SaaS and mid-market companies on the path to certification, from gap analysis to audit support. Learn more #### Penetration test For SaaS and enterprises with audit or customer requirements, web, network, API. Learn more #### AI Security For SaaS providers and corporations that build or deploy AI features and must demonstrably secure their LLM, RAG and agent systems. Learn more #### ISO 42001 AI Governance For companies with shadow AI: a turnkey AI management system (AIMS) under ISO 42001, documented and auditable. Learn more #### Vulnerability Scan For a fast first view of exposed attack surfaces, automated, with expert triage. Learn more #### CISO / ISO / ISM For companies outsourcing security accountability, fractional or as an ongoing mandate. Learn more #### IT security workshop (SME) For SME IT teams without a dedicated CISO, hands-on, NIS2-ready, in one day. Learn more New #### Cyber risk workshop for boards and executives For the board of directors and executive management: structure cyber risks as business risks, identify information gaps and prepare the next decisions. Learn more ## How we work Lean, transparent, fast. From intro call to mandate in two weeks. 1 ### Intro call 30 minutes, free and non-binding, with Dr. Staiger or a senior associate. 2 ### Scoping & quote Same-business-day quote with transparent terms, mandate, project or hourly. 3 ### Mandate or project Onboarded within two weeks, then quarterly touchpoints and dedicated points of contact. **Response within one business day**, in German, English or French. ## Selected references Excerpts from our references, regulated industry and growing SaaS. Aviation · Enterprise ### Pilatus Aircraft Privacy compliance across group boundaries, from ITAR-sensitive processes to international supply chain. Read case study → Healthcare · SaaS ### Openmedical AG Data protection and information security for sensitive patient data in the Swiss electronic patient record (EPR). Read case study → [View all references →](https://www.sidd.swiss/en/references) ## Frequently asked questions The answers decision-makers look for before the intro call. **Is the intro call really free and without obligation?** Yes. 30 minutes with Dr. Staiger or a senior associate, at no cost and with no follow-up obligation. We use the call to understand your situation, you decide afterwards. **We are not based in Switzerland, can you still support us?** Yes. We serve companies in Switzerland, the EU, the UK and the USA. For non-EU companies with EU customers we also act as Art. 27 GDPR representative. Our mandates often cover several jurisdictions at once. **How quickly can you start as external DPO?** Onboarding typically within two weeks after contract. For urgent matters, such as a data breach or regulator request, we are reachable the same or next business day. **Mandate or project, which fits us?** Mandate (e.g. external DPO role) when you need a continuous point of contact, typically CHF 500/month and up. Project when you have a clearly scoped initiative (ISO 27001 build-out, pen test, DPIA, cloud migration). We recommend the right format in the intro call. **Which languages do you work in?** German and English throughout. French and Italian on request. Contracts, expert opinions and training are delivered in the language relevant to your business. ## Book an intro call 30 minutes, free, no follow-up obligation. You speak directly with our team. Dr. Dominic Staiger CEO & Founder, SIDD - Dr. iur., LL.M. (Bond) - CIPP/E, Certified Information Privacy Professional - Attorney at Law (New York) "We'll get back to you personally within one business day." Prefer to write? [Request a quote →](https://www.sidd.swiss/en/quote) --- This document is the Markdown rendition of the page linked above. Please cite the HTML URL.