RCM
Not necessarily. RCM starts with a fixed-scope, fixed-price engagement such as an assessment, audit or compliance project. Monthly support follows when the organisation needs ongoing record maintenance, regular advice or managed privacy operations. Every monthly plan states the included volumes, response times, exclusions and overage prices.
Buy a defined outcome first. Monthly support is offered only when you subsequently need ongoing privacy governance.
Turn an unclear request into a service that is easy to approve and purchase.
Limit: no complete drafting or exhaustive audit at this stage.
Book the assessment →A documented, prioritised assessment that management can act on.
Limit: remediation and CNDP filings are priced separately.
Request the audit →Build the core documentation and operating controls for a straightforward organisation.
Limit: DPIAs, CNDP filings, technical testing and complex negotiations are excluded.
Scope the project →These prices cover the stated standard scope. We price any additional complexity before beginning the work.
One processing activity, checklist, form preparation and supporting-document review.
Select →One file, assessment, supporting documents, form and tracking table before client submission.
Select →One vendor: DPA, Article 28, hosting, subprocessors, transfers and corrective actions.
Select →One project, workshop, risk analysis, safeguards and DPIA report with final review.
Select →Legal notice, privacy and cookie policies, consent wording and standard terms of use.
Select →Every plan states its included volumes. We obtain approval before billing work outside the plan.
Excluded: DPIAs, CNDP filings, urgent incidents and complex contract drafting.
Choose Monitoring →Excluded: forensics, litigation, technical testing and work outside the stated volumes.
Choose Operations →Excluded: complex multi-entity DPO appointments, major crises, complete DPIAs and legal representation.
Choose Managed →We request approval before billing work outside the included volume.
Entities, processing activities, stakeholders, deliverables and included volumes.
Start date, client dependencies, milestones and delivery date.
Technical work, legal representation, external fees and additional engagements.
RCM advises and assists. The client approves decisions, provides information and remains accountable for its processing.
A reliable monthly fee requires an understanding of your processing activities, risks, projects and likely workload. The assessment or audit creates that scope without requiring an immediate subscription.
Yes, when you approve the recommended project within thirty days. The corresponding proposal confirms the credit.
No. Euro and dirham amounts are separate commercial price points based on the invoiced entity. They are not live exchange-rate conversions.
No. RCM provides advice, controls, deliverables and monitoring within the agreed scope. The organisation remains responsible for its decisions, resources and operational implementation.
Yes. RCM identifies the overage, confirms the applicable price and waits for your approval before performing the additional work, unless an agreed emergency procedure applies.
Yes, when the regulatory conditions are met, the scope allows the duties to be performed effectively and no conflict of interest is identified. Appointment does not transfer accountability for processing to RCM.
Start with the fixed-price assessment. You receive a scope, timeline and clear proposal before making any longer commitment.