Help Centre

Yes, but only in read-only mode. We scan the content of your recent emails and cloud storage files to detect compliance risks (like personal data being shared insecurely). We never send, delete, edit, or share any of your data. All access tokens are encrypted at rest.

A scan checks configured emails and files for things like: personal data (names, addresses, bank details) being shared insecurely, phishing signals, and risky data handling practices. Findings are mapped to UK GDPR, NIS2, and DORA and summarised into a 0–100 posture score.

UK GDPR is the UK's data protection law. Maximum fines can be up to £17.5m or 4% of global annual turnover (depending on circumstances).

NIS2 is the EU's network and information security directive. It can be relevant if you operate in the EU or serve EU customers.

DORA applies to financial entities and certain ICT suppliers in the EU financial sector.

Look at your findings table on the dashboard. Each finding has a remediation action - a specific step you can take to fix the issue. Start with Critical and High severity findings first. After fixing them, run another scan to see your improved score.

You can upgrade or downgrade your plan at any time from the dashboard. To manage your subscription (update payment method, cancel, view invoices), click the "Manage Subscription" button in the billing section. You can cancel anytime - no questions asked.

If you are an MSP, open the MSP Command Center, create your partner team, then use Client Access & onboarding to generate an invite. The link starts with /invite/client/ on complianceagent.uk — your client signs in with Microsoft or Google, sees a short thank-you page (not the compliance dashboard), and their account is linked so you can manage them from your partner workspace. Founder partner campaign links (/partner/join/… from the Invite Console) are only for onboarding new partners. If a link was scoped to a specific email, the invitee must sign in with that mailbox. Team seat limits depend on your plan.

We may have sent it successfully even if it is not in your inbox yet. First, check Spam or Junk (and Gmail Promotions if you use Google), then mark the message as Not spam and add the sender to your contacts so future links are trusted.

If automated mail from us keeps being filtered, whoever manages your organisation’s email (Google Workspace, Microsoft 365, etc.) should confirm SPF and DKIM DNS records are correctly published for the domain we send from. That improves delivery for everyone, including scan alerts.

Yes. You can request deletion at any time. This removes your profile, scan history, findings, scores, and encrypted tokens. If you can't access the dashboard, email us at karimtaitt@complianceagentuk.com and we'll permanently delete your account data within 30 days, except for billing records we must retain by law.

An attestation letter (Business plan) is a shareable PDF that summarises scan scope, date, and results (score, findings, and remediation status). It is a record of scan output - not a certification or legal compliance opinion.