Help Centre
Everything you need to know about using ComplianceAgent UK
Quick Start Guide
Sign In
Click "Sign in with Microsoft" or "Sign in with Google" on the login page. We only ask for read-only access.
Run a Scan
Click the blue “Run Scan” button. We'll check configured emails and files for risk signals. Most scans finish in 2-12 minutes depending on selected scope.
Review Results
See your posture score (0–100), review issues found, and view UK GDPR / NIS2 / DORA posture signals.
Take Action
Download your PDF report, fix any issues, then run another scan to see your score improve.
Understanding Your Dashboard
Posture Score (0–100)
A scan-based snapshot of risk posture. 80+ is lower risk, 60–79 needs attention, below 60 is higher risk. The score is calculated from three categories: PII Protection, Phishing Defence, and Data Handling.
Findings
Specific issues we found in your emails or files. Each finding has a severity level:
Regulation Badges
Shows scan-based posture signals mapped to each regulation (informational, not legal advice):
- UK GDPR - Data protection (applies to all UK businesses handling personal data)
- NIS2 - Network and information security (EU directive, relevant to UK firms operating in EU)
- DORA - Digital operational resilience (applies to financial services firms)
PDF Report
Click "Download Report" to get a professional PDF document you can share with your team, auditors, or clients. It includes your score, all findings, and step-by-step remediation advice.
Plans & Pricing
Starter — Free
One free scan (up to 100 emails + 50 files), 1 user. Compliance score, findings, remediation guidance, PDF report. No credit card.
Solo — £49/month
15 scans per month (scheduled every 2 days), 1 user. Score history, trends, scheduled scans, PDF reports.
Pro — £149/month
50 scans per month (daily), up to 5 users. File permission and sharing risk analysis, team invites, score history, PDF reports.
Business — £299/month
150 scans per month (daily), up to 15 users. Full features including attestation-style letters for clients or auditors, team management, priority email replies.
IT providers & MSPs
If you manage multiple clients’ Microsoft 365 or Google Workspace tenants, use our partner programme: portfolio-friendly pricing, MSP workflows, and client-ready reporting. Details, economics, and how to enquire are on the MSP Partners page.
Billing or plan questions: hello@complianceagent.uk
Paid plans are billed via Stripe. Cancel anytime from your dashboard.
Scan Scope & Limits
Starter free scan: one-time scan, up to 100 emails and 50 files.
Paid plans: higher monthly scan allowances and larger coverage over time.
What affects coverage: granted OAuth scopes, connected mailboxes/drives, and tenant permissions.
Important: scan results are based on scanned content in that run and are guidance, not legal advice.
Frequently Asked Questions
Yes, but only in read-only mode. We scan the content of your recent emails and cloud storage files to detect compliance risks (like personal data being shared insecurely). We never send, delete, edit, or share any of your data. All access tokens are encrypted at rest.
A scan checks configured emails and files for things like: personal data (names, addresses, bank details) being shared insecurely, phishing signals, and risky data handling practices. Findings are mapped to UK GDPR, NIS2, and DORA and summarised into a 0–100 posture score.
UK GDPR is the UK's data protection law. Maximum fines can be up to £17.5m or 4% of global annual turnover (depending on circumstances).
NIS2 is the EU's network and information security directive. It can be relevant if you operate in the EU or serve EU customers.
DORA applies to financial entities and certain ICT suppliers in the EU financial sector.
Look at your findings table on the dashboard. Each finding has a remediation action - a specific step you can take to fix the issue. Start with Critical and High severity findings first. After fixing them, run another scan to see your improved score.
You can upgrade or downgrade your plan at any time from the dashboard. To manage your subscription (update payment method, cancel, view invoices), click the "Manage Subscription" button in the billing section. You can cancel anytime - no questions asked.
If you're using the MSP flow, open the MSP Command Center and create your team there first. Then generate a magic link for your colleague or client and send it manually (Slack, email, etc.). They click the link, sign in with Microsoft or Google, and land in their normal dashboard at /app after joining automatically. If the link was created for a specific email address, they must sign in with that same email. Team size limits depend on your plan (Starter: 1, Solo: 1, Pro: 5, Business: 15).
Yes. You can request deletion at any time. This removes your profile, scan history, findings, scores, and encrypted tokens. If you can't access the dashboard, email us at hello@complianceagent.uk and we'll permanently delete your account data within 30 days, except for billing records we must retain by law.
An attestation letter (Business plan) is a shareable PDF that summarises scan scope, date, and results (score, findings, and remediation status). It is a record of scan output - not a certification or legal compliance opinion.
© 2026 ComplianceAgent UK. All rights reserved. ComplianceAgent UK Ltd · Company and registered office details shown on invoices and contracts. Privacy Policy · Terms of Service